Ukraine Accuses Russia of Providing Cyber Support and Spy Satellite Imagery to Iran

JAKARTA - Ukrainian intelligence assesses that Russian satellites have carried out dozens of detailed image surveys of military facilities and important sites throughout the Middle East, to help Iran attack US forces and other targets.

The conclusions, reviewed by Reuters, also found Russian and Iranian hackers collaborating in cyberspace. This is the most detailed report to date on how Russia has provided covert support to Iran since Israel and the US launched their attacks on February 28.

The undated assessment said Russian satellites conducted at least 24 surveys in areas in 11 Middle Eastern countries from March 21 to 31, covering 46 "objects," including US and other military bases and sites including airports and oil fields, Al Arabiya and Reuters reported (7/4).

"Within days of being surveyed, military bases and headquarters were targeted by Iranian ballistic missiles and drones," the assessment said, in what it described as a clear pattern.

A Western military source and a separate regional security source told Reuters that their intelligence also showed intense Russian satellite activity in the region and said that the images had been shared with Iran.

In a related development, Ukraine assessed that Russian satellites are actively monitoring the Strait of Hormuz, a vital waterway for one-fifth of global oil and LNG flows where Iran has imposed a de facto blockade on all vessels except "non-hostile ships."

Ukrainian assessments state that the exchange of satellite imagery is organized through permanent communication channels used by Russia and Iran and can also be facilitated by Russian military spies stationed in Tehran.

Reuters was not able to independently confirm the contents of the Ukrainian assessment.

Separately, White House spokeswoman Olivia Wales said there was no external support for Iran from any country that affected the success of US operations.

Meanwhile, Iran's Foreign Ministry had no immediate comment, while Russia's Defense Ministry, which invaded Ukraine four years ago, did not respond to a request for comment.

It is known that Russia and Iran have deepened military ties since Russian President Vladimir Putin ordered a full-scale invasion of Ukraine in February 2022.

Specifically, Ukraine and the West say Iran is providing Russia with long-range Shahed attack drones, which it then uses to bomb Ukraine, while also developing more advanced variants. Iran denies supplying weapons used against Ukraine.

President Putin and Iranian President Masoud Pezeshkian then signed a Comprehensive Strategic Partnership Agreement in January last year.

Article Four of the Agreement states, "in order to strengthen national security and counter common threats, the intelligence and security services of the Contracting Parties shall exchange information and experience."

In addition, Ukrainian intelligence assessments and regional security sources say Russia appears to be providing assistance to Iran in the cyber domain.

Iranian-controlled hacking groups have stepped up operations since late February, mainly targeting critical infrastructure and telecommunications companies in the region, they said.

Ukrainian assessments say Russian and Iranian hacker groups interact via Telegram and note the collaboration between the Russian groups "Z-Pentest Alliance," "NoName057(16)" and "DDoSia Project" with Iran's "Handala Hack."

For example, last month, groups including Handala Hack published warnings on Telegram about attacks on the information and communication systems of Israeli energy companies.

Russian groups simultaneously published access credentials to control systems at critical infrastructure facilities in Israel, they said.

Iranian hackers have also used some techniques in operations that suggest they have acquired them from Russian military intelligence hackers, they said.

For example, they said, the Iranian hacking groups "Homeland Justice" (UAC-0074) and "Karmabelow80" used ProfitServer, a Russian VPS provider from Chelyabinsk, to register domains.