Share this article on:
The United States and its allies have co-ordinated new sanctions on Russia after Moscow recognised two regions in eastern Ukraine as independent.
According to Reuters, Western nations and Japan punished Russia with new sanctions for ordering troops into separatist regions of eastern Ukraine and threatened to go further if Moscow launched an all-out invasion of its neighbour.
The US, the European Union, Britain, Australia, Canada and Japan announced plans to target banks and elites while Germany halted a major gas pipeline project from Russia in one of the worst security crises in Europe in decades. However, Flashpoint has observed a steady rise in internet-related activity across numerous involved parties, which could impact recruitment, as well as materials and financial support.
Flashpoint analysts have identified that both Russian-aligned and Ukrainian nationalist groups are using various chat and social media platforms to recruit and fund their operations.
This includes the separatists militias "Donetsk People’s Republic's Army" (DPR Army) and the "Luhansk People’s Republic's Army" (LPR Army) – pro-Russian rebel factions that control portions of these self-proclaimed statelets, which are home to more than 3.5 million residents.
Cross-platform recruitment and expansion
Flashpoint found numerous accounts belonging to self-purported pro-Russian separatist militias, which are using social media and chat platforms to recruit volunteers to fight in the Donbas. In many of their posts on VK, Telegram, and other platforms, recruiters have provided contact information. The analysts have matched data from its collections to these datasets shared on VK, showing that the same pro-Russian separatist groups recruiting on VK are also recruiting on Telegram.
The increased recruitment efforts by pro-Russian separatist militias across multiple platforms have ramped up since mid-October 2021. Analysts attempted to identify pro-Russian militia recruitment within Flashpoint datasets using the phone numbers associated with pro-Russian separatist groups shared on other platforms, specifically VK. Although Flashpoint collections predate the first conflict between Ukraine and Russia in 2014, analysts identified that these contact numbers were shared on Telegram in January 2022.
Additionally, analysts identified an increase in recruitment activity in the "Army of the DPR. Tips for volunteers" VK group around mid-October 2021, showing potential renewed interest by pro-Russian separatists around the time journalists first reported Russian-troop build up near the Ukrainian border.
Advertisement recruiting "signalmen" for in an Army of the DPR chat group on VK.
Recruitment communication
On 20 January 2022, the administrator of the Russian- and English-language Telegram channel “Defenders of Donbass / Защитники Донбасса” shared the following message in both English (below) and Russian:
"Here you can find information about service in the Armed Forces of the Donetsk People’s Republic.
Army of the DPR.
Tip for volunteers: The shortest contract term is one year.
Phones for communication [Phone numbers redacted]."
Previously, on 10 November 2021, the administrator of the VK group "Армия ДНР. Советы добровольцам" ("Army of the DPR. Tips for volunteers") posted a message that used the same contact information, including phone numbers, as the Telegram post listed above.
Militias were recruiting for frontline soldiers, anti-aircraft gunners, barracks guards as well as non-combat positions, such as drivers, medical personnel, and mechanics.
The road to Donetsk
Flashpoint has also identified discussion boards on VK allegedly affiliated with pro-Russian separatist militias with information for recruits on how to travel from various locations within Russia and the surrounding region to the Donbas.
These VK discussion boards were created several years ago but they remain active. Comment threads are regularly updated with new information - sometimes daily, as is the case on one DPR board - leading Flashpoint analysts to assess with moderate confidence that these discussion boards remain relevant.
An assessment of two discussion boards - one for the DPR, as mentioned above, and another for the LPR - show recent activity. The initial post on the DPR discussion board came in February 2015, and there are 51 pages of discussions since that initial post, the most recent of which came on 11 February 2022.
On 11 January the board's admin provided an updated travel guide.
The LPR discussion board isn't as nearly active, with the most recent post coming in November 2021.
Travel advice
Group administrators are informing potential recruits that methods of travel directly from Russia have been severely restricted due to precautionary measures related to COVID-19. Entry into the Donetsk People's Republic (DPR) or Luhansk People's Republic (LPR) from Russia is still possible for Russian citizens who carry passports for Belarus, Abkhazia, and South Ossetia, as well as the DPR and LPR. This also applies to Ukrainian citizens that permanently reside in territories occupied by the DPR or LPR.
For citizens of countries and localities not mentioned above, entry into the DPR or LPR is not possible without expressed permission from the controlling factions of the DPR or LPR. Recruits can obtain permission and travel there by applying through a military unit.
Analysts observed pro-Russian separatist militia VK groups sharing information for reliable transportation methods, travel information to recruitment stations, and contacts within militia groups for when recruits reach Donetsk.
Azov Battalion
Flashpoint analysts identified individuals allegedly recruiting for the “Azov Battalion” — a neo-Nazi and ultra-nationalist Ukrainian paramilitary group that was absorbed by the Ukrainian military in November 2014 — across various platforms, such as Telegram. The majority of recruiter contact information found within Flashpoint’s datasets match those shared on other online sources, showing the same groups recruiting for the Azov Battalion on Telegram are also recruiting through other social-media platforms — potentially as part of a centralised effort.
On 31 January, the administrator of a Ukrainian-speaking Telegram channel shared a recruitment advertisement for the Azov Battalion that included links to popular social media and video-sharing platforms. This advertisement also included information about three Telegram channels, all of which are allegedly affiliated with the Azov Battalion. Two of these Telegram channels are solely dedicated to recruitment.
Skills wanted
Both pro-Russian separatist and Ukrainian militia groups are recruiting military and non-military personnel alike. Analysts observed both groups sharing recruitment advertisements that list the skills and talents needed for each position.
On 1 February 2022, the administrator of a Ukrainian-language Telegram channel shared information for a recruitment drive in Mariupol, Ukraine, seeking to fill the following positions:
The group administrators used Telegram handles that Flashpoint analysts previously observed the Azov Battalion using for recruitment.
Additionally, on 14 February, a VK user posted in pro-Russian separatist group "Army of the DPR. Tips for Volunteers" that they are recruiting for "Military Unit 08826", which is located in Donetsk. This same VK user claimed that they were recruiting for various ranks, such as officers, and provided the phone number for interested parties to contact.
Use of cryptocurrencies
On 27 January 2022, a user operating under the alias "Defenders of Donbass / Защитники Донбасса" posted in the pro-Russian separatist Telegram channel "Anti-Bandera Task Force" asking for cryptocurrency and providing wallet numbers to support the DPR army.
This was the first instance Flashpoint analysts observed pro-Russian separatists using cryptocurrency wallets to collect donations in either Flashpoint collections or the open-web.
Based on blockchain research, neither crypto wallets have been used so far. The creation of crypto wallets by pro-Russian militants would allow them to receive anonymous funds quickly in the event of conflict.
[Related: State of the Phish report reveals email-based attacks dominated 2021]