Saudi Press

Saudi Arabia and the world
Thursday, Jul 10, 2025

Leak of secret documents reveals Putin's global and domestic cyberwar tactics

Leak of secret documents reveals Putin's global and domestic cyberwar tactics

Vladimir Putin’s global cyberwar strategy against the West has been exposed after a huge trove of secret documents have been leaked.

The ‘Vulkan Files‘, published on Thursday (30 March), reveal how a shadowy Russian cybersecurity company named RTV Vulkan has secretly been waging digital warfare on the Kremlin’s behalf.

The documents were reportedly leaked to German media by a whistleblower who opposed the war in Ukraine on 24 February 2022, and have been analysed by a consortium of over 50 journalists from eight countries.

Included in the leak is evidence of tools used to influence social media discussion, manipulate public opinion, interfere in elections, and attack national infrastructure.

The files reveal how a Russian cybersecurity company waged digital warfare around the world on the Kremlin’s behalf


Also revealed is the agency’s links to the notorious hacking organisation Sandworm, who disabled Ukraine’s power grid in 2015 and played a key role in Russia’s brazen attempts to derail the US presidential election the following year.

Two of the group’s operatives were indicted for distributing emails stolen from Hillary Clinton’s Democrats in 2016, and in 2017 Sandworm attempted use the same tactics to influence the outcome of the French presidential vote, the US claims.

Sandworm has also been credited with distributing the most destructive malware ever recorded, known as NotPetya, and targeting the South Korean Oympics.

Codenamed Scan-V, NotPetya scours the internet for vulnerabilities, which are then stored for use in future cyber-attacks.

Another powerful disinformation tool, known as Amezit, was also found to be in use by the group.

Amezit is used to create fake profiles en masse which are then used to disseminate pro-Kremlin content on a large scale via email, SMS, and social media.

Public opinion can be influenced by pushing individual hashtags in a targeted manner, and bot databases provide the basis for these operations.

These tools were used to influence foreign affairs, and to exert even greater control over parts of the internet in Russia’s sphere of influence.

The firm had previously waged attacks on Ukraine’s power grid and had obtained maps of US and Swiss energy infrastructure


It has been reported that one of the leaked documents includes maps of US energy infrastructure. Another contains the details of a nuclear power station in Switzerland.

John Hultquist, the vice-president of intelligence analysis at the cybersecurity firm Mandiant, said: ‘These documents suggest that Russia sees attacks on civilian critical infrastructure and social media manipulation as one and the same mission, which is essentially an attack on the enemy’s will to fight.’

The firm counts a wide variety of Russian security services as its clients, including the FSB, the foreign intelligence service, SVR, and the military intelligence service GRU, the Guardian reports.

RTV Vulkan used some of the world’s most notorious malware to wage war on the West


The whistleblower who leaked the explosive documents told a German newspaper that the FSB and GRU ‘hide behind’ Vulkan in the days after Russia’s invasion of Ukraine last year to avoid culpability.

The anonymous source said: ‘People should know the dangers of this.

‘Because of the events in Ukraine, I decided to make this information public.

‘The company is doing bad things and the Russian government is cowardly and wrong.

‘I am angry about the invasion of Ukraine and the terrible things that are happening there.

‘I hope you can use this information to show what is happening behind closed doors.’

The authenticity of the documents has been confirmed by five separate intelligence agencies.

The firm had previously worked with the same group of hackers responsible for leaking Hillry Clinton’s emails during the 2016 US Presidential Election


Following the leak, the ‘Vulkan Files’ international research team identified several hundred accounts on Twitter that could be directly or indirectly linked to the documents.

To hide their Russian origins, profiles created by the group created email accounts at Gmail, Yahoo, and Hotmail, and paid for transactions with cryptocurrency or prepaid credit cards.

However, despite their careful manoeuvring Russia’s attempts to control the online sphere have faltered since the start of their invasion of Ukraine.

Earlier this year, Russian Foreign Ministry Spokesperson Maria Zakharova confirmed that the Kremlin has ceded centralized control over the Russian information space and that Russian President Vladimir Putin apparently cannot readily fix it.

This is due to the emergence of grassroots anti-disinformation groups who have taken an active role in identifying and countering Russian propaganda online.

In their brief exchange with a German journalist, the leaker said they were aware that giving sensitive information to foreign media was dangerous.

But they had taken life-changing precautions. They had left their previous life behind, they said, and now existed ‘as a ghost’.

Newsletter

Related Articles

Saudi Press
0:00
0:00
Close
BRICS Expands Membership with Indonesia and Ten New Partner Countries
Elon Musk Founds a Party Following a Poll on X: "You Wanted It – You Got It!"
AI Raises Alarms Over Long-Term Job Security
Saudi Arabia Maintains Ties with Iran Despite Israel Conflict
Russia Formally Recognizes Taliban Government in Afghanistan
Mediators Edge Closer to Israel-Hamas Ceasefire Agreement
Emirates Airline Expands Market Share with New $20 Million Campaign
House Oversight Committee Subpoenas Former Jill Biden Aide Amid Investigation into Alleged Concealment of President Biden's Cognitive Health
Amazon Reaches Major Automation Milestone with Over One Million Robots
Meta Announces Formation of Ambitious AI Unit, Meta Superintelligence Labs
China Unveils Miniature Insect-Like Surveillance Drone
Marc Marquez Claims Victory at Dutch Grand Prix Amidst Family Misfortune
Iran Executes Alleged Israeli Spies and Arrests Hundreds Amid Post-War Crackdown
Trump Asserts Readiness for Further Strikes on Iran Amid Nuclear Tensions
Iran's Parliament Votes to Suspend Cooperation with Nuclear Watchdog
Trump Announces Upcoming US-Iran Meeting Amid Controversial Airstrikes
Trump Moves to Reshape Middle East Following Israel-Iran Conflict
NATO Leaders Endorse Plan for Increased Defence Spending
U.S. Crude Oil Prices Drop Below $65 Amid Market Volatility
Explosions Rock Doha as Iranian Missiles Target Qatar
“You Have 12 Hours to Flee”: Israeli Threat Campaign Targets Surviving Iranian Officials
Oman Set to Introduce Personal Income Tax, First in Gulf
Germany and Italy Under Pressure to Repatriate $245bn of Gold from US Vaults
Iran Intensifies Crackdown on Alleged Mossad Operatives After Sabotage Claims
Trump Praises Iran’s ‘Very Weak’ Response After U.S. Strikes and Presses Israel to Pursue Peace
WATCH: Israeli forces show the aftermath of a massive airstrike at Iran's Isfahan nuclear site
We have new information and breaking details to share about what is shaping up to be a historic air campaign tonight
Six Massive Bombs Dropped on Fordow; Trump: 'A Historic Moment for the U.S., Israel, and the World'
Fordow: Deeply Buried Iranian Enrichment Site in U.S.–Israel Crosshairs
United States Conducts Precision Strikes on Iran’s Nuclear Sites
US strikes Iran nuclear sites, Trump says
Pakistan to nominate Trump for Nobel Peace Prize.
Israel Confirms Assassination of Quds Force Commander in Tehran
16 Billion Login Credentials Leaked in Unprecedented Cybersecurity Breach
Senate hearing on who was 'really running' Biden White House kicks off
G7 Leaders Fail to Reach Consensus on Key Global Issues
Mass exodus in Tehran as millions try to flee following Trump’s evacuation order
Iranian Military Officers Reportedly Seek Contact with Reza Pahlavi, Signal Intent to Defect
Vietnam Emerges as Luxury Yacht Destination for Ultra‑Rich
China's Iranian Oil Imports Face Disruption Amid Escalating Middle East Tensions
Trump Demands Iran's Unconditional Surrender Amid Escalating Conflict
Israeli Airstrike Targets Iranian State TV in Central Tehran
President Trump is leaving the G7 summit early and has ordered the National Security Council to the Situation Room
Netanyahu Signals Potential Regime Change in Iran
Analysts Warn Iran May Resort to Unconventional Warfare
Iranian Regime Faces Existential Threat Amid Conflict
Energy Infrastructure Becomes War Zone in Middle East
Iran Conducts Ballistic Missile Launches Amid Heightened Tensions with Israel
Iran Signals Openness to Nuclear Negotiations Amid Ongoing Regional Tensions
Shock Within Iran’s Leadership: Khamenei’s Failed Plan to Launch 1,000 Missiles Against Israel
×