Adversary Intelligence — 2026-08-15

SSU Dismantles FSB Agent Network Guiding Russian Airstrikes Across Three Ukrainian Regions

BLUFDismantling four isolated informants leaves the FSB handler's Telegram-based recruitment pipeline intact, ensuring replacement agents can be sourced from the same open funnel at minimal cost.

The SSU counterintelligence department detained four FSB informants simultaneously in the Donetsk, Dnipropetrovsk and Kirovohrad regions following a multi-stage operation, with the suspects acting independently but sharing a common Russian handler 1234. According to the SSU, the network targeted logistics depots holding weapons and ammunition, air defense positions, and areas with concentrations of Ukrainian personnel and equipment 14. The detainees include a former machine-building plant employee from Kramatorsk who tracked airfield and fortification locations, two agents in Dnipropetrovsk region (a municipal utility worker from Kamianske and a deserter from Pavlohrad) who passed military-facility coordinates, and an unemployed man from Znamianka in Kirovohrad region who surveyed the town for Defense Forces sites 1234. The SSU states the men came to Russian intelligence attention after posting anti-Ukrainian comments in Telegram chats and communicated via anonymous messenger chats they deleted after each session; all four have been notified of suspicion under Article 111.2 of Ukraine's Criminal Code (high treason under martial law) and face life imprisonment with confiscation of property 124.

Analysis
The network's structure, four operationally isolated recruits reporting to one Russian handler, points to a centralized FSB tasking cell running parallel low-cost human sources rather than a single compromised cell; disruption of this group leaves the handler's broader recruitment pipeline intact. Telegram comment threads functioned as an open recruitment funnel, screening for pro-Russian sentiment before contact, a vector Ukrainian counterintelligence cannot close without restricting the platform itself. The targeting set, logistics depots, air defense positions, and troop concentrations, mirrors strike-planning requirements rather than generic surveillance, indicating the tasking originated from units directly supporting airstrike execution against the Defense Forces.

6 sources

SSU dismantles FSB intelligence network spying in three regions of Ukraine simultaneously - GlobalSecurity.org
СБУ викрила групу коригувальників ворожих атак по Силах оборони у трьох областях - Ukrinform
СБУ: викрито агентурну мережу, яка шпигувала в трьох областях за логістичними складами з озброєнням - Interfax-Ukraine
Four agents were detained for passing data on military facilities in three regions of Ukraine to the FSB - UNN
СБУ викрила агентурну мережу фсб, яка коригувала удари рф по Донеччині, Дніпропетровщині та Кіровоградщині - Security Service of Ukraine (SSU) press service
СБУ викрила агентурну мережу фсб, яка коригувала удари рф по Донеччині, Дніпропетровщині та Кіровоградщині - Security Service of Ukraine (SSU) press service