AI-Powered Cyber Espionage Targets Russian Defense Firms in Pro-Ukrainian Campaign
A cyber espionage campaign leveraging AI-generated fake documents has targeted Russian technology companies involved in air defense and sensitive electronics, according to cybersecurity firm Intezer. The operation, attributed to the hacking group Paper Werewolf (GOFFEE), has been active since 2022 and primarily focuses on Russian entities, reflecting broader efforts to gain a military advantage amid the ongoing conflict.
The attack highlights the growing misuse of accessible AI tools for sophisticated cyber operations. Researchers, including Intezer’s Nicole Fishbein, noted that such campaigns offer rare insight into attacks on Russian organizations, which are typically difficult to observe. The targets included major Russian defense contractors, suggesting an intent to gather intelligence on military equipment production and supply chains a common tactic in pro-Ukrainian hacking efforts during the war.
While Intezer linked the activity to Paper Werewolf, the exact affiliation of the group remains unclear. Some experts speculate potential ties to other pro-Ukrainian hacking operations, though no definitive nation-state connection has been confirmed. The campaign underscores the escalating role of AI in cyber warfare and the persistent targeting of Russia’s defense sector.
Source: https://moderndiplomacy.eu/2025/12/19/russian-arms-firms-hit-by-ai-powered-cyber-attacks/
Intezer cybersecurity rating report: https://www.rankiteo.com/company/intezer-labs
Intezer cybersecurity rating report: https://www.rankiteo.com/company/intezer-labs
"id": "INTINT1768785206",
"linkid": "intezer-labs, intezer-labs",
"type": "Cyber Attack",
"date": "6/2022",
"severity": "25",
"impact": "1",
"explanation": "Attack without any consequences"{'affected_entities': [{'industry': 'Defense, sensitive electronics',
'location': 'Russia',
'type': 'Defense contractors, technology companies'}],
'attack_vector': 'AI-generated fake documents',
'data_breach': {'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Military intelligence, supply '
'chain data'},
'description': 'A cyber espionage campaign leveraging AI-generated fake '
'documents has targeted Russian technology companies involved '
'in air defense and sensitive electronics. The operation, '
'attributed to the hacking group Paper Werewolf (GOFFEE), has '
'been active since 2022 and primarily focuses on Russian '
'entities, reflecting broader efforts to gain a military '
'advantage amid the ongoing conflict.',
'impact': {'data_compromised': 'Intelligence on military equipment production '
'and supply chains'},
'motivation': 'Military intelligence gathering, pro-Ukrainian campaign',
'references': [{'source': 'Intezer'}],
'threat_actor': 'Paper Werewolf (GOFFEE)',
'title': 'AI-Powered Cyber Espionage Targets Russian Defense Firms in '
'Pro-Ukrainian Campaign',
'type': 'Cyber Espionage'}