Ukrainian Cyber Division Deceives Russian Troops with Fake Starlink Service
Ukraine's 256th Cyber Assault Division announced on Thursday that it created a fake Starlink registration service. This operation was designed to deceive Russian soldiers into providing sensitive data.
Working with open-source intelligence groups InformNapalm and MILITANT, the division promoted Telegram channels and bots. These platforms offered assistance to Russian troops in registering Starlink terminals on a Ukrainian whitelist, though the channels themselves were controlled by Ukrainian forces.
Data Harvest and Deception
Russian soldiers reportedly shared details such as terminal ID numbers, satellite dish numbers, Starlink account numbers, and location coordinates via the fake service.
The 256th Division reported collecting 2,420 data entries on Russian Starlink terminals and their precise locations.
In addition to the valuable intelligence, the operation also collected $5,870 from Russian troops who paid for the fraudulent registration service.
Operational Context
This initiative followed a region-wide Starlink block implemented by SpaceX earlier in the month. The block limited service only to terminals registered with the Ukrainian government. SpaceX enacted this measure due to reports of Russian forces acquiring Starlink terminals on the black market for drone guidance and battlefield communications. Ukrainian officials noted that Russian attempts to register terminals through the fake service indicated their continued and significant need for the service.
Collaboration and Consequences
The collected data was forwarded to Serhii Sternenko, an advisor on drone logistics and technology for Ukraine's defense ministry.
InformNapalm confirmed its supporting role, which included strategically complaining about the fake Telegram channels. This tactic was employed to draw in more Russian military personnel, increasing the reach of the deception.
MILITANT referred to the initiative as "Operation Self-Liquidation" and suggested that the precise coordinates sent by Russians were targeted with artillery.
InformNapalm stated that the deception's "intended effect has been achieved," signaling the conclusion of the operation.