Image: hromadske.ua
The Story
A trusted introduction opened OpenAI’s door; the video call made the impersonation feel official, not secure.
The call looks like a social-engineering failure rather than a sophisticated network intrusion. The impersonators used a plausible Ukrainian identity, a trusted intermediary, and a video meeting to gain access to officials whose government backgrounds made the conversation credible. OpenAI’s investigation confirmed the prank, but the sources do not detail which verification steps failed or what information was protected.
- AccessThe reported route ran through a Ukrainian official in San Francisco, turning social trust into the gateway.
- ExposureThe discussion reportedly touched on military AI, Pentagon ties, and possible Ukrainian support.
- ResponseOpenAI says it investigated, acted internally, and contacted relevant authorities, but has not publicly described every safeguard.
- The pranksters reportedly reached OpenAI through a Ukrainian official in San Francisco who believed their request was genuine and arranged an introduction.
- The impersonators kept their camera off while posing as Rustem Umerov during the 17-minute call.
- OpenAI said its investigation concluded that the call was a prank and that it took steps to prevent similar incidents.
Deeper Insight
Vovan and Lexus, Russian pranksters, kept cameras off, yet a trusted introduction opened OpenAI's war room. Familiarity beat proof.
For 17 minutes, three senior OpenAI security staff discussed military AI and possible support for Ukraine with callers posing as a Ukrainian official. A Ukrainian intermediary made the introduction, and the camera stayed off. The breach was social, not technical: a plausible relationship carried sensitive talk farther than identity checks did.
- What it could changeSensitive government calls could require proof that survives a trusted introduction, not just a familiar name.
- How it touches todayThe same weak link appears wherever a warm referral turns a video call into a security clearance.
- Our futureAs AI becomes part of war planning, one believable voice could open doors meant for states.
- Vovan and Lexus previously impersonated Ukrainian officials to reach UK Defence Secretary Ben Wallace and Polish Foreign Minister Radek Sikorski.
- A 2023 study found that Zoom’s authentication ceremony could be susceptible to impersonation attacks despite end-to-end encryption protecting later communications.
- The OpenAI call exposed discussion of Pentagon ties, the Daybreak Blue model, and possible military support for Ukraine.
Sources · 8
- 1 Early research (not yet peer-reviewed)
- 2 News reporting
- 2 Forum, video, personal
- 3 Other / unclassified
What do these mean?
- Early research (not yet peer-reviewed). A research paper posted publicly before independent experts have reviewed it (a preprint). Real researchers, but not yet checked.
- News reporting. Journalism: newspapers, magazines and news sites.
- Forum, video, personal. Forums, social posts, video, blogs and personal accounts.
- Other / unclassified. A site we have not classified yet. This says nothing good or bad about it.
Featured · Primary source · arxiv.org
VOICE-ZEUS: Impersonating Zoom's E2EE-Protected Static Media and Textual Communications via Simple Voice Manipulations
Early research · not yet reviewed
# VOICE-ZEUS: Impersonating Zoom's E2EE-Protected Static Media and Textual Communications via Simple Voice Manipulations arXiv:2310.13894. cs.CR. Submitted 2023-10-21. ## Authors Mashari Alatawi and Nitesh Saxena ## Details - License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/ ## Versions -
Read sourceAnalysis · aiweekly.co
Russian Pranksters Draw OpenAI Natsec Trio Into Ukraine Call | AI Weekly
Other
Russian Pranksters Draw OpenAI Natsec Trio Into Ukraine Call | AI Weekly # Russian Pranksters Draw OpenAI Natsec Trio Into Ukraine Call By Alexis Dufresne · Published November 12, 2026 at 13:59 UTC · Updated November 12, 2026 at 14:30 UTC ## TL;DR - OpenAI's national-security policy chief, strategic
Read sourceAnalysis · protectiongroupinternational.substack.com
Digital Threat Digest - 24 March 2022
Forum or personal account
Digital Threat Digest - 24 March 2022 SubscribeSign in # Digital Threat Digest - 24 March 2022 Protection Group International Mar 24, 2022 Share PGI’s Digital Investigations Team brings you the Digital Threat Digest, daily SOCMINT and OSINT insights into disinformation, misinformation, and online ha
Read source