Israeli firm used online ads to run vast spy operation, researchers say




![]()
Filming a drone strike and posting it online may be quietly teaching Russia’s drones to aim better. Russia is collecting footage of its Geran attack drones striking Ukraine, probably to check how its optical target-recognition and guidance algorithms perform in combat, presidential defense-technology adviser Serhii “Flash” Beskrestnov says.
Russia has fitted its jet-powered Geran drones with machine vision that lets them recognize and track targets on their own in the final seconds of flight, a capability Ukraine’s electronic warfare cannot easily defeat. Now, Moscow is paying people inside Ukraine to film where those drones land, which Flash says is no coincidence after four years of not asking.
“Across many Telegram channels, the enemy is asking traitors to film videos of ‘Geran’ impacts and transmit information for a reward. For four years they didn’t ask, and suddenly it has become so crucial,” Beskrestnov notes.
The reason, he believes, lies in those optical guidance systems. Russian forces need impact footage to see how its algorithms are performing in real combat conditions, according to the expert.
His takeaway for them is blunt: stop posting the videos of Russian assaults. He stresses the serious danger of publishing footage of impact sites and urges people not to film or share it.
“This serves as a signal to everyone: do not film and do not publish videos of ‘Shahed’ hits. You see how vital and necessary this is to Russia,” Beskrestnov adds.
Earlier, Ukrenergo board chairman Vitaly Zaichenko said that a Russian drone severed a unique power transmission tower at the Dnipro River crossing in Kyiv, and it cannot be restored. He added that the company was developing new technical solutions "on the fly, and very fast."
It would start the procedures for those solutions from 15 October. Russia’s use of drones able to sever metal towers is a new and serious challenge for Ukraine’s power engineers.
![]()
Ukrainian and Japanese officials discussed establishing backup bridge crossings in the event of Russian strikes, preparing municipal infrastructure for winter, and Japan's continued assistance with Ukraine's recovery, Ukraine's Minister for Restoration, Infrastructure and Transport, Mykola Kalashnyk, reported on 14 October.
Russia is targeting Kyiv's bridges to paralyze the city and break civilian morale, defense analyst Hamish de Bretton-Gordon wrote in The Telegraph. On 1 and 2 October, Russia attacked Kyiv's Southern Bridge, then struck the Northern Bridge on 3 and 4 October. Ukraine is now working with international partners to establish backup bridge crossings that could maintain connectivity even if major routes are damaged.
The discussions took place during a meeting between Minister Kalashnyk, Japan's Ambassador to Ukraine Yo Osumi, and Osamu Hattori, head of the Japan International Cooperation Agency (JICA) office in Ukraine, according to the statement.

Kyiv's Southern Bridge, for example, plays a critical role in logistics because freight traffic uses it, transport planning expert Dmytro Bespalov noted in an article for Ukrainska Pravda. At the same time, installing additional metal structures to reinforce bridges could be dangerous given their technical condition and existing load levels, he said.
One potential solution is to establish backup bridge crossings.
Ukraine and JICA have agreed to continue working together on engineering solutions for setting up these crossings. Japan has already delivered 720 meters of prefabricated bridge structures to Ukraine, which are expected to be used to create alternative routes if Russia's attacks damage major bridges, Kalashnyk said.
The initiative is intended to help maintain transportation links, ensure the delivery of critical supplies, and preserve evacuation routes for civilians.

During the meeting, Ukraine and JICA discussed equipping water utilities with backup power supplies, addressing the need for modular boiler plants, and obtaining equipment to ensure uninterrupted heating and water services. Ukraine has already submitted lists of the necessary equipment to JICA for consideration as part of a new emergency assistance project, Kalashnyk said.
An intercepted document outlining an alleged Russian plan for strikes against Ukraine this winter reportedly describes attacks on 60 critical infrastructure facilities using up to 1,000 missiles, drones, and aerial bombs. Potential targets include electrical substations, hydroelectric power plants, thermal power plants, boiler facilities, and infrastructure related to water supply and wastewater management.

The document also describes potential strikes on facilities in Kyiv, Kharkiv, Odesa, and several other cities. Such attacks could disrupt electricity, heating, water supply, and wastewater services.
Russia’s expanding campaign against commercial shipping in the Black Sea is creating a security crisis that extends far beyond Ukraine. The latest drone attacks off Bulgaria’s coast have left 11 sailors missing, forced Sofia to seek assistance from NATO and the European Union, and raised concerns that Moscow is attempting to disrupt one of the world’s principal agricultural export routes.
On 13th October, the Guinea-Bissau-flagged HS Dignity sank after being struck by drones approximately 17 nautical miles east of the Bulgarian village of Krapets. Another vessel, the Ukrainian-owned, Maltese-flagged Chelsea 3, was attacked near Byala. All 15 crew members were rescued, although five sustained minor injuries. The incidents followed earlier attacks in Bulgaria’s exclusive economic zone on 6th October, when the ALFA WATAN sank and the grain-carrying ABLE was damaged.
The significance lies not simply in the destruction of merchant vessels but in the geographical expansion of the threat. Commercial routes previously regarded as comparatively safer alternatives to Ukraine’s exposed ports are now becoming operationally dangerous. Bulgaria and Romania, both NATO and EU members, face disruption to trade, maritime insurance and port operations as the conflict spreads across the western Black Sea.
The latest attacks follow months of Russian strikes against Ukrainian ports, export terminals and civilian shipping. As EU Today previously reported, repeated attacks on Odesa have already reduced Ukraine’s grain-export capacity, while alternative routes through the Danube and neighbouring European countries cannot fully replace its major Black Sea terminals.
The extension of attacks towards Bulgaria changes the economic calculation. Ships carrying agricultural products, those approaching Danube ports and vessels operating between Black Sea countries now face greater uncertainty, regardless of whether they enter Ukrainian territorial waters.
Maritime security company Ambrey assessed the earlier October attacks as highly likely to have been conducted by Russian forces. Its assessment identified vessels associated with Ukrainian grain trade as the principal targets, rather than suggesting that every commercial ship was being attacked indiscriminately.
This distinction is important, but it offers little reassurance to international shipping companies. A campaign directed against Ukrainian trade can disrupt the wider maritime economy when insurers, shipowners and exporters cannot establish which routes remain safe.
The economic consequences are already becoming apparent. Shipowners must consider higher insurance premiums, additional security measures and the possibility of losing vessels and crews. Traders may redirect cargoes or withdraw from routes whose commercial returns no longer justify the risks.
The attacks have also placed Bulgarian Prime Minister Rumen Radev in an increasingly difficult political position.
Radev has advocated renewed diplomatic engagement with Moscow and questioned the emphasis placed on military assistance to Ukraine. He has rejected accusations of being pro-Russian, presenting his approach as a pragmatic alternative to prolonged confrontation.
Yet the attacks have demonstrated the limitations of maintaining political distance from a war whose economic and security consequences are reaching Bulgarian waters.
After summoning Russian Ambassador Eleonora Mitrofanova on 13th October, Radev acknowledged that Bulgaria possessed no conclusive evidence establishing responsibility for the latest strikes. Nevertheless, he argued that their consequences benefited Russia and questioned why Ukraine would attack its own commercial vessels.
According to the Bulgarian News Agency’s account of the meeting, the prime minister also warned that higher insurance costs and shipping companies’ reluctance to serve Bulgarian ports were already damaging the national economy.
This is the fundamental change confronting Sofia. The conflict is no longer solely a question of Bulgaria’s position towards Ukraine or its diplomatic relationship with Russia. It is affecting the country’s commercial interests, energy supplies and responsibilities as a NATO member.
Radev’s response does not necessarily indicate a wholesale reversal of his previous political position. It demonstrates that the practical obligations of government can leave considerably less room for accommodation with Moscow than the arguments advanced from outside direct responsibility for national security.
The broader consequences may be felt most severely outside Europe.
Ukraine remains an important supplier of wheat, maize and vegetable oils to international markets, including countries in Africa, Asia and the Middle East. Interruptions to these exports affect more than Ukraine’s agricultural revenues. They can increase transport costs, delay deliveries and reduce the availability of competitively priced food in import-dependent countries.
Speaking at the Warsaw Security Forum on 12th October, President Volodymyr Zelenskyy warned of a possible agricultural crisis, arguing that Russian interference with Black Sea shipping could leave countries in Africa, Asia and the Middle East facing serious supply difficulties within months.
The warning reflects a mechanism already familiar from the earlier stages of Russia’s invasion. Following Moscow’s withdrawal from the UN-brokered grain agreement in July 2023, Ukrainian agricultural exporters faced renewed attacks on port infrastructure and substantial uncertainty over maritime access.
The danger is not necessarily an immediate worldwide shortage of grain. Wheat prices remained relatively steady following the 13th October incidents. Rather, sustained disruption could progressively reduce available export capacity, increase costs and place vulnerable importing countries under greater pressure.
For Moscow, such disruption could serve several purposes simultaneously: weakening Ukraine’s economy, raising the costs of international support for Kyiv and creating additional pressures on governments concerned about food inflation and social stability.
The immediate challenge for Brussels and NATO is how to protect commercial navigation without allowing the conflict to expand into a direct military confrontation.
Bulgaria has requested stronger air and maritime surveillance and is seeking closer coordination with Romania and Turkey. Defence Minister Dimitar Stoyanov said on 14th October that Sofia expected to join a NATO counter-drone initiative by the end of the month.
The EU has already developed a framework for addressing precisely such threats. Its Black Sea strategy, announced in May 2025, proposed a maritime security hub integrating surveillance, intelligence-sharing, infrastructure protection and regional cooperation.
The attacks now expose the difference between developing a security framework and providing effective protection to merchant vessels. Better intelligence can identify threats, but preventing further sinkings requires detection systems, coordinated responses and sufficient defensive capabilities.
Turkey’s involvement is particularly important because of its control over the Bosphorus and Dardanelles and its established role in Black Sea maritime security. Any workable regional arrangement must therefore extend beyond cooperation between Bulgaria and Romania.
The incidents occurred outside Bulgaria’s 12-nautical-mile territorial sea, meaning they do not automatically constitute an armed attack on NATO territory under Article 5. Nevertheless, repeated strikes within the economic zones of alliance members pose a substantial challenge to maritime security.
Russia’s campaign against Ukrainian exports is increasingly imposing costs on neighbouring European states and international trading partners. The question facing the EU is whether it can secure the commercial routes on which both Ukraine’s economy and the food supplies of millions beyond Europe depend.
Bulgarian authorities are investigating a reported arson attack at a Starlink satellite communications station near Sofia, Prime Minister Rumen Radev said on October 14.
Ivaylo Mirchev, an opposition lawmaker from the Yes, Bulgaria party, revealed two days earlier that two masked men had set fire to 11 of the facility’s 17 antennas over the weekend. He published a video of the incident on Facebook and raised the case in Parliament, where he called for an explanation of the government’s response.
Radev described the investigation as “extremely intensive” and said Bulgarian authorities were working with partner services, without identifying suspects or discussing a possible motive.
Plamen Tonchev, head of Bulgaria’s State Agency for National Security, said the site had been scheduled for expansion, and part of its perimeter fencing had been removed, potentially making it easier for intruders to enter.
The facility, identified as the Plana satellite communications station about 20 kilometers south of Sofia, provides service used by the Ukrainian military.
Starlink has become an important component of Ukraine’s battlefield communications, allowing military personnel to maintain connectivity and coordinate operations. Bulgarian authorities have not disclosed whether the damaged antennas were directly carrying military traffic or whether the fire disrupted Ukrainian operations.
The incident follows an arson attack on a Starlink station in Wola Krobowska, about 40 kilometers south of Warsaw, on September 23.
Two Turkish nationals were arrested in Germany in connection with that arson case, Polish officials said on October 12. A third was reportedly apprehended the next day.
Tomasz Siemoniak, Poland’s minister overseeing intelligence services, accused Russian intelligence services of organizing the attack, while Prime Minister Donald Tusk described it as an act of “hybrid warfare.”
Mirchev cited the Polish case as a parallel to the incident near Sofia. However, Bulgarian authorities have not publicly attributed the fire to Russia, and no evidence has established that the two attacks were coordinated.
The incidents have drawn attention to the vulnerability of ground infrastructure supporting a satellite network that has become strategically important to Ukraine during its conflict with Russia.
_______________________________________________________________________________________________________________________
SouthFront: Analysis and Intelligence
NOW hosted at southfront.press
Previously, SouthFront: Analysis and Intelligence was at southfront.org.
The .org domain name had been blocked by the US (NATO) (https://southfront.press/southfront-org-blocked-by-u-s-controlled-global-internet-supervisor/) globally, outlawed and without any explanation
Back before that, from 2013 to 2015, SouthFront: Analysis and Intelligence was at southfront.com
The post After Poland, Suspected Arson Targets Starlink Stations in Bulgaria (Video) appeared first on South Front.