Ukrainian businesses are increasingly coming under the crosshairs not of one-off negative posts, but of calculated, coordinated media attacks. Waves of negative material spread through Telegram channels and anonymous websites, and in some cases the information pressure escalates into outright blackmail. This is described in an RBC-Ukraine article titled "Business as a Target: How Media Attacks Strike Ukraine's Economic Resilience." According to the authors, this is not spontaneous criticism but a reproducible scheme that has already affected Philip Morris Ukraine, Uklon, Meest China, and other companies operating in Ukraine.
How a Coordinated Media Attack Is Structured
The attack scenario, as described by experts, usually follows the same pattern. First, a negative publication appears on an obscure resource or in a small Telegram channel. Then it is picked up by dozens of other platforms, and certain formulations begin to be quoted by websites and even major media outlets, creating the illusion of broad independent resonance. Media experts call the simultaneous appearance of nearly identical texts across a network of Telegram channels one of the clearest markers of a coordinated campaign. An additional tactic is linking the business or its owner to topics that are currently most sensitive to the public, in order to destroy the reputation as quickly as possible.
The Ajax Systems Case: From a "Detective Bureau" to Million-Follower Channels
Over the past two months, the company Ajax Systems has faced a wave of negative publications in anonymous Telegram channels. The first messages appeared en masse in early June; one of the most active platforms was a channel positioning itself as a "detective bureau." During this period, more than two dozen materials about the company and its founder, Alexander Konotopsky, were published there. In parallel, similar texts began appearing in other, smaller channels, and then the same theses were picked up by significantly larger channels with millions of followers. The next stage was the distribution of the material through a number of dubious websites — it was these sites that major media outlets subsequently cited, creating the effect of multiple independent confirmations.
The theme of the accusations changed as the campaign progressed. Initially, the publications concerned state procurement and the defense sector, then the focus shifted to the company's international activities. In mid-July, at the peak of protests over personnel changes in the government, channels began massively spreading claims about Konotopsky's alleged involvement in financing the protests — without any evidence. In parallel, there was an intrusion into the founder's private life: discussions of his household, family, and purchases. According to RBC-Ukraine, Ajax Systems employees received offers from "intermediaries" to settle the situation for a financial reward.
Contradictory Data
Here, the versions of the parties diverge fundamentally. Anonymous Telegram channels and dubious websites claimed the existence of defense orders, financing of protests, and a political dimension to the activities of the company and its founder. Ajax Systems itself categorically denies all these claims: the company states that it has never carried out defense orders and has not received funds from the structures mentioned in the publications, and it denies any political dimension to its own activities or to the activities of Alexander Konotopsky personally. According to the publication, these statements are corroborated by independent audit findings from a "Big Four" firm. Thus, two incompatible pictures are presented publicly: anonymous accusatory narratives on one hand, and refutations backed by an audit on the other; independent confirmation of the anonymous theses is not provided in the material.
Consequences for the Economy and the Law-Enforcement Context
As the article emphasizes, such campaigns have consequences far beyond the reputation of a single business: they undermine trust in Ukrainian manufacturers, weaken the country's investment appeal, and create additional risks for the economy in wartime conditions. The law-enforcement context of this issue is also developing: it was previously reported that police in Germany exposed the owner of an anonymous website and Telegram channel who, according to the investigation, had been discrediting and blackmailing a Ukrainian businessman since 2018, demanding 3,500 dollars in cryptocurrency for the removal of negative material. According to sources of the publication UP, this is the editor-in-chief of the ORD website and Telegram channel, Stanislav Rechinsky, who, it is alleged, in May 2026 demanded money for the removal of false information about the general director of the security holding SHERIFF. Law-enforcement officials, according to the same data, are preparing documents to place the suspect on an international wanted list and to extradite him to Ukraine.
