Ukrainian division says Russian troops paid for fake Starlink registry that revealed their locations

"The 256th Cyber Assault Division said it partnered with open-source intelligence groups to promote a network of Telegram channels and bots that offered to help the Kremlin's troops register Starlink terminals on a Ukrainian whitelist. But the channels were a ruse, and had instead been run by Ukrainian forces, who were sent location and terminal data from the soldiers, the 256th said."

"SpaceX cut off connectivity in Ukraine earlier this month, allowing only terminals logged with the Ukrainian government to continue receiving service. The sweeping move was enacted after repeated reports that Russian forces were buying terminals on the black market to guide attack drones and run battlefield communications. Russia downplayed the impact of the geofenced block on its operations, but Kyiv officials say that attempts by the Kremlin's troops to register terminals indicate their need for the American-run service."

A Ukrainian cyberwarfare unit created a fake Starlink registration service and promoted it via Telegram channels and bots to lure Russian soldiers into submitting registration, payment, terminal, and location data. The 256th Cyber Assault Division partnered with open-source intelligence groups InformNapalm and MILITANT to run the network and harvest details from soldiers attempting to whitelist Starlink terminals. SpaceX geofenced Starlink service in Ukraine to allow only government-logged terminals after reports of Russian forces buying terminals to guide drones and run battlefield communications. Russian forces sought civilian help to bypass the block; Kyiv views those attempts as evidence of reliance on Starlink.

Read at Business Insider