Russian technology companies involved in air defense and sensitive electronics have recently been targeted by a cyber espionage group using AI-generated fake documents. This cyber campaign, discovered by the cybersecurity firm Intezer, highlights how AI tools can be easily used for serious security operations. The group believed to be behind this attack is referred to as “Paper Werewolf” or GOFFEE, which has been active since 2022 and mainly focuses on Russian targets.
The hacking indicates the aggressive pursuit of a military advantage by Ukraine and its allies amid ongoing negotiations about the conflict with Russia, which includes threats of further territorial claims. Leading cybersecurity researcher Nicole Fishbein noted that the campaign provides a rare chance to understand attacks on Russian entities, which are usually hard to see. The use of AI-generated documents shows how easily accessible AI tools can be misused for harmful purposes.
Targets of the hacking campaign included major Russian defense contractors, suggesting an interest in the Russian military industry. This access might reveal details about the production of military equipment and defense supply chains. Pro-Ukrainian hackers spying on Russian defense companies is not unusual in the context of the war.
While Intezer connected the operation to Paper Werewolf based on various factors, it remains uncertain if the hackers are aligned with any specific nation-state or group. Some experts believe there may be links between this group and other known pro-Ukrainian hacking efforts.
With information from Reuters
