Starlink Deception: Ukrainian Cyber Units Trick Russian Troops into Exposing Positions and Funding Forces
Cyber Operations Target Russian Forces in Ukraine
A Ukrainian cyber unit has reportedly managed to deceive Russian soldiers into revealing their positions and even donating money to Ukraine’s Armed Forces. The operation involved pretending to assist Russian troops in reconnecting Starlink devices, which they were using on the battlefield.
Russian forces have been utilizing unauthorized access to Starlink for operating drones and other military equipment in occupied areas of Ukraine. However, this access was effectively disabled last week after the Ukrainian government, in collaboration with SpaceX, implemented a mandatory registration and "whitelist system."
The Ukrainian cyber forces took advantage of Russia's desperation to regain access to a critical battlefield technology. They posed as a Russian-linked activation service, offering to help restore terminals that had been disconnected under the new registration rules.
This operation was carried out by the 256th Cyber Assault Division in conjunction with InformNapalm and MILITANT, according to a statement published on social media on February 12. Russian servicemen were instructed to submit identifying information and the coordinates of their terminals, under the pretense that the devices would be reactivated through Ukrainian administrative service centers.
The group reported that they collected 2,420 data packets related to Russian-used terminals and transferred them to Ukrainian law enforcement and defense agencies. According to the statement, the data was provided to authorities "for final transfer into brick mode," referring to the disabling of the terminals. The group claims the terminals were subsequently deactivated. However, the Kyiv Independent could not independently verify these claims.
In addition, the group stated that it received $5,870 from Russian soldiers seeking to restore connectivity. This money is being donated to fundraising efforts for Ukrainian drones. The group also identified 31 Ukrainian individuals who were willing to assist Russian forces by registering terminals. According to the statement, this information has been forwarded to Ukraine’s Security Service (SBU).
Importance of Starlink in the Conflict
Starlink, which provides high-speed satellite internet without reliance on local mobile networks, has become critical infrastructure on both sides of the war. Ukrainian forces rely heavily on the system for frontline communications and drone coordination. At the same time, Kyiv has accused Russia of exploiting the technology to improve battlefield connectivity.
On February 10, Ukraine’s Coordination Headquarters for the Treatment of Prisoners of War stated that Russia was coercing the families of Ukrainian POWs into registering Starlink terminals. This tactic was described as another attempt to bypass Ukraine’s new verification system.
Strategic Implications
The use of Starlink by both sides highlights its strategic importance in modern warfare. Its ability to provide reliable internet access in remote or contested areas makes it a valuable asset for military operations. As the conflict continues, the control and regulation of such technologies will likely remain a key focus for both Ukraine and Russia.
The actions taken by the Ukrainian cyber unit demonstrate how digital warfare can be used to gain tactical advantages. By manipulating the perception of assistance, they were able to gather critical intelligence and disrupt Russian operations. These tactics underscore the evolving nature of cyber warfare and its impact on traditional military strategies.
As the situation develops, it will be important to monitor how both sides adapt to the changing technological landscape. The integration of advanced communication systems like Starlink into military operations will continue to shape the dynamics of the conflict in the region.
