--- title: "Business as a Target: How Coordinated Media Attacks on Telegram Strike Ukraine's Economy" description: "Ukrainian businesses are increasingly becoming targets of coordinated media attacks on Telegram and anonymous websites. We break down the scheme, the Ajax Systems case, and the consequences for the economy." date: 2026-08-28T12:44:01.000Z lang: en url: https://xab.info/en/posts/business-as-target-coordinated-media-attacks-telegram-ukraine-economy-ajax-systems tags: [telegram, media-attacks, ukraine-business, reputation-management, ajax-systems, blackmail] publisher: "XAB.info" --- # Business as a Target: How Coordinated Media Attacks on Telegram Strike Ukraine's Economy ![Telegram messenger logo on a screen: the platform used to launch coordinated media attacks on Ukrainian businesses](https://xab.info/media/2026/08/28/medie-ataki-na-ukrainskij-biznes-skhema-i-kejs-ajax-systems/medie-ataki-na-ukrainskij-biznes-skhema-i-kejs-ajax-systems-1.webp) ## 🎯 Key Points - Coordinated media attacks on Ukrainian businesses unfold according to a repeating scheme: from an anonymous channel, through million-follower channels, to citations by major media. - The simultaneous appearance of identical texts across a network of Telegram channels is called by experts the key marker of a coordinated campaign. - Over two months, Ajax Systems faced more than two dozen materials in anonymous channels; the theme of the accusations shifted from defense orders to political ones. - The company denies defense orders and any political dimension; according to RBC-Ukraine, this is confirmed by audit findings from a "Big Four" firm. - The attacks undermine trust in manufacturers and investment appeal; in Germany, a blackmailer demanding money for the removal of material was exposed. Ukrainian businesses are increasingly coming under the crosshairs not of one-off negative posts, but of calculated, coordinated media attacks. Waves of negative material spread through Telegram channels and anonymous websites, and in some cases the information pressure escalates into outright blackmail. This is described in an RBC-Ukraine article titled "Business as a Target: How Media Attacks Strike Ukraine's Economic Resilience." According to the authors, this is not spontaneous criticism but a reproducible scheme that has already affected Philip Morris Ukraine, Uklon, Meest China, and other companies operating in Ukraine. ### How a Coordinated Media Attack Is Structured The attack scenario, as described by experts, usually follows the same pattern. First, a negative publication appears on an obscure resource or in a small Telegram channel. Then it is picked up by dozens of other platforms, and certain formulations begin to be quoted by websites and even major media outlets, creating the illusion of broad independent resonance. Media experts call the simultaneous appearance of nearly identical texts across a network of Telegram channels one of the clearest markers of a coordinated campaign. An additional tactic is linking the business or its owner to topics that are currently most sensitive to the public, in order to destroy the reputation as quickly as possible. ### The Ajax Systems Case: From a "Detective Bureau" to Million-Follower Channels Over the past two months, the company Ajax Systems has faced a wave of negative publications in anonymous Telegram channels. The first messages appeared en masse in early June; one of the most active platforms was a channel positioning itself as a "detective bureau." During this period, more than two dozen materials about the company and its founder, Alexander Konotopsky, were published there. In parallel, similar texts began appearing in other, smaller channels, and then the same theses were picked up by significantly larger channels with millions of followers. The next stage was the distribution of the material through a number of dubious websites β€” it was these sites that major media outlets subsequently cited, creating the effect of multiple independent confirmations. The theme of the accusations changed as the campaign progressed. Initially, the publications concerned state procurement and the defense sector, then the focus shifted to the company's international activities. In mid-July, at the peak of protests over personnel changes in the government, channels began massively spreading claims about Konotopsky's alleged involvement in financing the protests β€” without any evidence. In parallel, there was an intrusion into the founder's private life: discussions of his household, family, and purchases. According to RBC-Ukraine, Ajax Systems employees received offers from "intermediaries" to settle the situation for a financial reward. ### Contradictory Data Here, the versions of the parties diverge fundamentally. Anonymous Telegram channels and dubious websites claimed the existence of defense orders, financing of protests, and a political dimension to the activities of the company and its founder. Ajax Systems itself categorically denies all these claims: the company states that it has never carried out defense orders and has not received funds from the structures mentioned in the publications, and it denies any political dimension to its own activities or to the activities of Alexander Konotopsky personally. According to the publication, these statements are corroborated by independent audit findings from a "Big Four" firm. Thus, two incompatible pictures are presented publicly: anonymous accusatory narratives on one hand, and refutations backed by an audit on the other; independent confirmation of the anonymous theses is not provided in the material. ### Consequences for the Economy and the Law-Enforcement Context As the article emphasizes, such campaigns have consequences far beyond the reputation of a single business: they undermine trust in Ukrainian manufacturers, weaken the country's investment appeal, and create additional risks for the economy in wartime conditions. The law-enforcement context of this issue is also developing: it was previously reported that police in Germany exposed the owner of an anonymous website and Telegram channel who, according to the investigation, had been discrediting and blackmailing a Ukrainian businessman since 2018, demanding 3,500 dollars in cryptocurrency for the removal of negative material. According to sources of the publication UP, this is the editor-in-chief of the ORD website and Telegram channel, Stanislav Rechinsky, who, it is alleged, in May 2026 demanded money for the removal of false information about the general director of the security holding SHERIFF. Law-enforcement officials, according to the same data, are preparing documents to place the suspect on an international wanted list and to extradite him to Ukraine. ## πŸ” Fact-Check Verification - [Media Attacks on Ukrainian Business: How the Scheme Works and Why It Is Dangerous](https://www.rbc.ua/ukr/news/splanovana-diskreditatsiya-shcho-stoyit-hvileyu-1787838790.html) - ΠŸΠ΅Ρ€Π²ΠΈΡ‡Π½Ρ‹ΠΉ источник: схСма Π°Ρ‚Π°ΠΊ, кСйс Ajax Systems, опровСрТСния ΠΊΠΎΠΌΠΏΠ°Π½ΠΈΠΈ ΠΈ аудиторскиС Π²Ρ‹Π²ΠΎΠ΄Ρ‹, послСдствия для экономики. - [Media Attacks on Ukrainian Business: How a Discreditation Campaign Is Structured](https://novosti.ua/society/mediynye-ataki-na-ukrainskiy-biznes-shema-i-ugrozy-dlya-ekonomiki) - Π”ΡƒΠ±Π»ΠΈΡ€ΡƒΠ΅Ρ‚ ΠΈ Ρ€Π°ΡΡˆΠΈΡ€ΡΠ΅Ρ‚ описаниС схСмы ΠΊΠ°ΠΌΠΏΠ°Π½ΠΈΠΈ дискрСдитации ΠΈ ΡƒΠ³Ρ€ΠΎΠ·Ρ‹ для экономики. - [Blackmail on Telegram: How Dangerous Are the Messenger's Bots](https://www.gazeta.ru/tech/2021/03/02/13497716/telegram_blackmail.shtml) - ΠšΠΎΠ½Ρ‚Π΅ΠΊΡΡ‚Π½Ρ‹ΠΉ источник ΠΎ ΠΌΠ΅Ρ…Π°Π½ΠΈΠ·ΠΌΠ°Ρ… ΡˆΠ°Π½Ρ‚Π°ΠΆΠ° Π² Telegram; использован лишь ΠΊΠ°ΠΊ ΠΎΠ±Ρ‰ΠΈΠΉ Ρ„ΠΎΠ½, Π½Π΅ ΠΊΠ°ΠΊ ΠΏΠΎΠ΄Ρ‚Π²Π΅Ρ€ΠΆΠ΄Π΅Π½ΠΈΠ΅ ΠΊΠΎΠ½ΠΊΡ€Π΅Ρ‚Π½Ρ‹Ρ… Ρ„Π°ΠΊΡ‚ΠΎΠ² ΠΏΠΎ Ajax Systems. ## ❓ FAQ ### Q: How can a coordinated media attack be recognized? **A:** According to media experts, one of the clearest markers is the simultaneous appearance of nearly identical texts across a network of Telegram channels, as well as the subsequent pickup of the same formulations by dubious websites and major media outlets. ### Q: What does Ajax Systems say about the accusations of defense orders and financing of protests? **A:** The company states that it has never carried out defense orders and has not received funds from the structures mentioned in the publications, and it denies any political dimension to its own activities or to the founder's activities. According to RBC-Ukraine, this is confirmed by independent audit findings from a "Big Four" firm. ### Q: What consequences do such attacks have for the economy? **A:** They undermine trust in Ukrainian manufacturers, weaken the country's investment appeal, and create additional risks for the economy in wartime conditions.