How Ukrainian hacktivists tricked Russian pilots’ wives into exposing troops involved in the Mariupol theatre airstrike

A Ukrainian hacktivist group tricked the wives of Russian pilots into participating in a fake calendar project. This initiative aimed to reveal the identities of the pilots involved in a deadly airstrike on a theatre in Mariupol, where civilians sought shelter. Members of the volunteer-based international intelligence community, InformNapalm, successfully persuaded multiple wives to pose in front of a Russian fighter jet, wearing their husbands’ medals.

The Scheme Behind the Photoshoot

InformNapalm’s deception was part of a broader effort to identify members of the Russian regiment responsible for the 2022 bombing of the Mariupol theatre. According to the group, Sergey Atroshchenko is the commander of the 960th Assault Aviation Regiment, which carried out the airstrike. The attack resulted in significant civilian casualties.

To carry out their plan, InformNapalm hacked Atroshchenko’s email and accessed his personal information. A member of the group then contacted his wife, Lilia Atroshchenko, pretending to be a colleague of her husband. They convinced her that a photoshoot with the wives of the unit was intended to boost the morale of the Russian pilots fighting in Ukraine.

Results of the Operation

Lilia Atroshchenko agreed to organize the photoshoot, believing it was a morale-boosting initiative. The resulting photographs showed a group of wives in their husbands’ uniforms and adorned with campaign medals. This allowed InformNapalm to gather crucial information on the Russian pilots involved.

InformNapalm later shared their findings with investigators at the International Criminal Court in The Hague. The group’s actions highlight the ongoing cyber resistance efforts amidst the conflict between Ukraine and Russia.