Friday, November 15, 2024
HomeCyber AttackDoppelgänger: Hackers Employ AI to Launch Highly sophistication Attacks

Doppelgänger: Hackers Employ AI to Launch Highly sophistication Attacks

Published on

It has been observed that threat actors are using AI technology to conduct illicit operations on social media platforms.

These malicious actors employ several tactics and automated bots to achieve their nefarious goals, which can pose a serious threat to online security and privacy.

  • Spread disinformation
  • Manipulate public opinion
  • Escalate isolating content

These AI-driven tactics enable the rapid dissemination of misleading narratives, contributing to the escalation of online misinformation campaigns.

- Advertisement - SIEM as a Service

Cybersecurity researchers at Insikt Group recently identified “Doppelgänger,” a Russia-linked influence network conducting a sophisticated operation.

Doppelgänger

The operators of this network employ advanced obfuscation techniques and potentially utilize generative AI to craft deceptive news articles, targeting audiences in the following countries via fake news sites and social media accounts:-

  • Ukraine
  • The United States
  • Germany
Doppelgänger articles dated Nov. 10, 2023, impersonating UNIAN (Source – Recordedfuture)

Insikt Group found a campaign hitting Ukraine, using many fake social media accounts for Coordinated Inauthentic Behavior (CIB). 

They shared bogus articles mimicking Ukrainian news, spreading anti-Ukraine narratives on:-

  • Military
  • Politics

Doppelgänger hit the US and Germany with fake copies of 6 legitimate news outlets’  in later campaigns. 

For the US, it fueled divisions before the 2024 election, pushing anti-LGBTQ+ views, criticizing the military, and intensifying political separations over Ukraine.

Doppelgänger influence assets (Source – Recordedfuture)

In Germany, it targeted economic and social problems to deteriorate the trust in leadership and boost the nationalist emotions.

Doppelgänger aimed at the US with three fake news outlets:-

  • Electionwatch[.]live: Generates AI-driven political content.
  • Mypride[.]press: Stirs anti-LGBTQ+ sentiments.
  • warfareinsider[.]us: Critiques US military and foreign policy from a politicized stance.

Campaigns

Here below, we have mentioned all the campaigns identified by the security analysts:-

  • Campaign 1: Doppelgänger Impersonates Ukrainian News Organizations to Influence Ukrainian Audiences
  • Campaign 2: Doppelgänger Seeking to Influence US Audiences with Inauthentic News Outlets Leveraging AI and Divisive Commentary on Social Issues and US Military
  • Campaign 3: Doppelgänger Seeking to Influence German Audiences with Grim Outlook on European Migration Movements, German Economic Outlook

Ongoing collaboration and public reporting are crucial to counter malicious influence. Media should vigilantly monitor brand abuse, issue takedowns, and boost online literacy.

Due to its continued evolution and use of AI, Doppelgänger’s exposed activities hint at lasting societal impacts, like corrupting trust and heightened polarization.

Tushar Subhra
Tushar Subhra
Tushar is a Cyber security content editor with a passion for creating captivating and informative content. With years of experience under his belt in Cyber Security, he is covering Cyber Security News, technology and other news.

Latest articles

Google Unveils New Intelligent, Real-Time Protections for Android Users

Google has once again raised the bar for mobile security by introducing two new...

Chinese National Faces 20 Years of Jail Time for Laundering Millions in Crypto

Daren Li, 41, a dual citizen of China and St. Kitts and Nevis, and...

Google to Issue CVEs for Critical Cloud Vulnerabilities

Google Cloud has announced a significant step forward in its commitment to transparency and...

GitLab Patches Critical Flaws Leads to Unauthorized Access to Kubernetes Cluster

GitLab has rolled out critical security updates to address multiple vulnerabilities in its Community...

Free Webinar

Protect Websites & APIs from Malware Attack

Malware targeting customer-facing websites and API applications poses significant risks, including compliance violations, defacements, and even blacklisting.

Join us for an insightful webinar featuring Vivek Gopalan, VP of Products at Indusface, as he shares effective strategies for safeguarding websites and APIs against malware.

Discussion points

Scan DOM, internal links, and JavaScript libraries for hidden malware.
Detect website defacements in real time.
Protect your brand by monitoring for potential blacklisting.
Prevent malware from infiltrating your server and cloud infrastructure.

More like this

Google Unveils New Intelligent, Real-Time Protections for Android Users

Google has once again raised the bar for mobile security by introducing two new...

Chinese National Faces 20 Years of Jail Time for Laundering Millions in Crypto

Daren Li, 41, a dual citizen of China and St. Kitts and Nevis, and...

Google to Issue CVEs for Critical Cloud Vulnerabilities

Google Cloud has announced a significant step forward in its commitment to transparency and...