The group appears to be targeting victims based on their proximity and involvement to and within pro-Ukraine organizations.
Source: htdarkreading.com