ESET Research has uncovered Operation Texonto [7], a cyber-psyops campaign targeting Ukrainian citizens with Russian propaganda themes [3].
Description
Operation Texonto aimed to make citizens believe Russia was winning the war by distributing war-related schemes and disinformation via spam emails [3]. Spear-phishing attacks targeted a Ukrainian defense company in October 2023 and an EU agency in November and December 2023 using fake Microsoft login pages. The threat actor behind the campaign also utilized an email server for sending Canadian pharmacy spam, indicating potential ties to a Russian cybercrime community. Domain names associated with the campaign referenced topics like Alexei Navalny, suggesting a Russia-aligned group’s involvement. The campaign targeted Ukrainian government employees and energy companies initially [4], expanding to reach a broader audience, including Ukrainian speakers in other European countries [4]. The emails contained pro-Russian content and even suggested self-harm as a means to avoid military deployment. Operation Texonto combined elements of espionage, disinformation [1] [2] [3] [4] [5] [6] [7] [8], and fake pharmacy campaigns [4], exhibiting characteristics of PSYOPs during wartime [1]. Researchers suspect the campaign may extend to targeting Russian dissidents and supporters of the late opposition leader.
Conclusion
Operation Texonto highlights the need for increased cybersecurity measures to combat cyber-psyops campaigns. It is crucial for organizations and individuals to remain vigilant against such threats and to implement strong security protocols to protect sensitive information. The implications of Operation Texonto may extend to future attacks targeting Russian dissidents and supporters, emphasizing the importance of ongoing monitoring and response strategies in the face of evolving cyber threats.
References
[1] https://www.eset.com/int/about/newsroom/press-releases/research/russian-made-psyops-in-ukraine-operation-texonto-targets-ukrainians-with-war-related-disinformation-eset-research-discovers-1/
[2] https://finance.yahoo.com/news/russian-made-psyops-ukraine-operation-110000853.html
[3] https://www.cybertecwiz.com/targeting-ukrainian-citizen/
[4] https://www.infosecurity-magazine.com/news/russian-hackers-email-ukrainians/
[5] https://www.welivesecurity.com/en/eset-research/operation-texonto-information-operation-targeting-ukrainian-speakers-context-war/
[6] https://ciso2ciso.com/russian-hackers-launch-email-campaigns-to-demoralize-ukrainians-source-www-infosecurity-magazine-com/
[7] https://www.enterpriseitworld.com/russian-psyops-targeting-ukraine-with-war-disinformation-eset-research-reveals-operation-texonto/
[8] https://www.forbes.com/sites/daveywinder/2024/02/21/russia-unleashes-2-pronged-psyops-and-cyberattack-on-ukraine/
