Adversary Intelligence — 2026-07-28

SBU Detains University Student Recruited by FSB to Map Energy Infrastructure and Air Defenses in Poltava

BLUFRussia's use of Telegram cash-for-tasks channels to recruit civilian spotters for combined energy and air-defense targeting underscores a scalable, low-signature collection model that Ukrainian counterintelligence will struggle to suppress at volume.

The SBU detained a student at a university in Poltava Oblast on suspicion of working for Russia's FSB after Russian handlers recruited her through Telegram channels she used to search for "easy money," according to the security service 12. Investigators say she scouted energy facilities supplying Poltava and surrounding districts under the guise of walking through the city, marking sites Russia was allegedly preparing to strike from the air, and separately toured the region by taxi to photograph and film Ukrainian air-defense positions 134. The SBU says it detected her activity in advance and detained her before she could pass the collected data to her Russian handlers 12. A search of the suspect yielded smartphones and computer equipment that the SBU says contain evidence of her cooperation with Russian intelligence 25. She has been served a notice of suspicion for treason under martial law, per Part 2 of Article 111 of Ukraine's Criminal Code, and is held without bail pending trial, facing a maximum sentence of life imprisonment with confiscation of property 45.

Analysis
The FSB's recruitment pipeline through Telegram's cash-for-tasks culture screens economically vulnerable civilians near front-adjacent energy infrastructure, sourcing targeting data through deniable amateurs rather than trained agents, and pairing energy-site mapping with air-defense filming points to tasking meant to combine grid-strike preparation with defense-suppression intelligence, consistent with Russia's recurring campaign against Ukraine's power grid. Detection before any data transfer indicates Ukrainian counterintelligence is actively watching this recruitment channel in oblasts near combat zones, though reporting rests entirely on the SBU's own release, with other outlets merely republishing that account without independent corroboration. The detention could equally reflect routine public-messaging timed to reassure residents ahead of winter strikes rather than disruption of an operationally mature threat.
7 sources
  1. Caught before the strike: the student mapping Poltava grid for Russian missiles - Euromaidan Press
  2. У Полтаві викрили агентку ФСБ, яка збирала дані для ударів по енергетиці, - СБУ - Censor.NET
  3. Хотіла залишити Полтаву без світла: затримано дівчину, яка готувала удар по енергооб'єктах - АрміяInform
  4. СБУ затримали студентку, яка фіксувала для РФ розташування енергооб'єктів на Полтавщині - Suspilne Poltava
  5. СБУ: затримано студентку, яка намагалася влаштувати блекаут у Полтаві - Interfax-Ukraine
  6. SBU detains Russian agent near Poltava energy sites - Mezha.net
  7. SBU press statement on detention of FSB-recruited Poltava student agent - SBU (Security Service of Ukraine) official Telegram channel

View in full brief →

UNCLASSIFIED // OPEN SOURCE