Russian forces attempted to restore Starlink satellite communications to coordinate and manage frontline units by recruiting Ukrainians willing to activate terminals in their names for payment.
Instead, the plan was intercepted by Ukraine’s cyber community, which launched a counteroperation, Army TV reported.
Members of the 256th Cyber Assault Division, working with investigative group InformNapalm and a collective identified as MILITANT, set up a network of Telegram channels and automated bots posing as potential “drops.”
The activists documented 31 recruitment attempts and collected 2,420 data packets they claim revealed the locations of Russian-operated Starlink terminals.
The information was reportedly passed to Ukrainian law enforcement and military intelligence, though the claims could not be independently verified.
The cyber groups also said the exchanges resulted in $5,870 in payments from Russian participants, which they said were redirected to support Ukraine’s armed forces.
Starlink’s Battlefield Role
Starlink, operated by US-based SpaceX, has played a critical role in enabling battlefield communications since early in the war, and both Ukraine and Russia rely on the system.
Reliable battlefield communications have become increasingly critical as both Ukrainian and Russian forces rely on drones, precision artillery, and real-time reconnaissance to guide operations.
Satellite internet systems such as Starlink enable command-and-control functions in contested areas where conventional infrastructure has been degraded or destroyed.
The incident highlights the expanding role of cyber operations and open-source intelligence communities in the conflict, which has seen both sides engage in digital activities alongside conventional military operations.
