Several Russian defense companies focused on air defense, advanced electronics, and various types of weaponry have come under attack from a pro-Ukrainian cyberespionage organization that utilized AI-generated documents as bait, as reported by Reuters on Friday.
The assaults, identified by the U.S.-based cybersecurity firm Intezer, were likely carried out by a group referred to as Paper Werewolf or GOFFEE, according to senior security researcher Nicole Fishbein’s comments to Reuters.
This group, which has been active since 2022, primarily targets Russian interests and is recognized as pro-Ukrainian among cybersecurity experts.
In one particular instance, the group sent out a document designed to mimic a concert invitation intended for high-ranking military officials, which was seemingly created by artificial intelligence.
Additionally, another document masquerading as a request from Russia’s Ministry of Industry and Trade sought justification for pricing in accordance with state regulations.
The application of AI-generated documents by Paper Werewolf illustrates how “accessible AI resources can be misused for harmful purposes,” as well as how “new technologies can simplify the execution of intricate attacks, emphasizing that it is the misuse rather than the technology itself that constitutes the main issue,” Fishbein remarked.
Oleg Shakirov, a researcher specializing in Russian cyber policy, noted to Reuters that the selection of targets underscores the attackers’ focus on Russia’s defense sector.
Gaining access to internal information from significant defense contractors could provide insights into “everything from the specifications of systems to air defense mechanisms, as well as defense supply chains and research and development procedures,” he explained.