Covert Russian Influence Operation Targets Ukraine and Western Support
Brief news summary
The Social Design Agency (SDA) in Moscow plays a crucial role in "Operation Undercut," a U.S.-sanctioned initiative started in December 2023. This operation's main objective is to destabilize Ukraine and strain Western alliances through AI-generated videos and disinformation, which are made to mirror credible media outlets. Targeting audiences in Ukraine, Europe, and the U.S., the initiative seeks to undermine Ukrainian leadership, cast doubt on Western support, and incite socio-political unrest. Additionally, it aims to influence narratives surrounding the 2024 U.S. elections and the Israel-Gaza conflict, as reported by Recorded Future's Insikt Group. "Operation Undercut" is part of an ongoing trend in Russian influence campaigns, like Doppelganger and Operation Overload, which employ similar tactics to manipulate global public opinion. These campaigns often involve creating fake news sites and utilizing AI-generated content with popular hashtags to broaden their reach. In a related event, the Russia-linked group APT28, also known as GruesomeLarch, conducted a "nearest neighbor attack" on a U.S. organization in early 2022. By compromising a neighboring entity's Wi-Fi network and exploiting the lack of multi-factor authentication, they accessed the target network using password-spraying techniques. This attack, which occurred shortly before the Russian invasion of Ukraine, aimed to gather data on individuals involved in Ukraine-related activities.A Moscow-based company, Social Design Agency (SDA), which was sanctioned by the U. S. earlier this year, has been linked to a covert influence operation called Operation Undercut. This campaign aims to sway public opinion against Ukraine and erode Western support, using AI-enhanced videos and fake websites that impersonate reputable news sources. It targets audiences in Ukraine, Europe, and the U. S. , and runs alongside other efforts like Doppelganger, which also spreads anti-Ukraine sentiment. Recorded Future’s Insikt Group has identified that Operation Undercut seeks to discredit Ukraine's leadership, question Western aid, and stir geopolitical tensions, including influencing narratives around the 2024 U. S. elections and the Israel-Gaza conflict.
The operation uses over 500 social media accounts to amplify content and taps into trending hashtags to reach wider audiences. This effort is part of Russia's broader strategy to destabilize Western alliances by portraying Ukraine as corrupt. It shares infrastructure with other operations like Doppelganger and Operation Overload, which have targeted the 2024 French elections and other events using fake news and AI-generated content. Additionally, the disclosure coincided with the Russia-linked APT28 (GruesomeLarch) threat actor breaching a U. S. company in February 2022. This was achieved through a technique called the nearest neighbor attack, involving password-spray attacks to obtain Wi-Fi credentials without multi-factor authentication, targeting officials with expertise on Ukraine ahead of Russia's invasion. By compromising a nearby entity, APT28 managed lateral moves to the intended target's network.
Watch video about
Covert Russian Influence Operation Targets Ukraine and Western Support
Try our premium solution and start getting clients — at no cost to you
