KEY TAKEAWAYS

• Ukrainian companies are receiving threatening emails falsely claiming responsibility on behalf of “Shahed” drones.
• The messages appear designed to intimidate businesses and create panic rather than carry out genuine cyberattacks.
• Authorities and cybersecurity experts urge companies not to respond or pay any demands.
• Businesses are encouraged to report suspicious messages and strengthen email security procedures.

A new wave of threatening emails is targeting Ukrainian businesses, using the name of Iran-designed Shahed drones in an apparent attempt to intimidate company owners and employees. The campaign appears to be part of a broader psychological pressure effort aimed at disrupting business activity and spreading fear rather than causing direct technical damage.

Businesses Receive Coordinated Threats

Companies in several regions of Ukraine have reported receiving emails containing threats linked to alleged drone attacks or demands for money.

While the wording varies, the messages seek to pressure businesses into believing they have become specific targets, creating uncertainty among employees and management.

Experts Warn of Psychological Pressure

Cybersecurity specialists say the campaign relies primarily on fear and uncertainty.

Rather than exploiting computer systems, the emails attempt to manipulate recipients emotionally by referencing the well-known Shahed drone attacks that have become associated with Russia’s long-range strikes against Ukrainian cities.

Authorities Urge Businesses to Stay Alert

Officials advise companies not to engage with the senders, transfer money, or open suspicious attachments.

Instead, businesses should report the incidents to the relevant authorities, verify communications through official channels, and ensure staff members understand how to identify phishing and extortion attempts.

Strengthening Digital Resilience

The incident highlights the growing importance of cybersecurity awareness for Ukrainian businesses.

Many companies have increased staff training, improved email filtering, and introduced stricter security procedures to reduce the risk of phishing, fraud, and other forms of digital intimidation.