Counterintelligence — 2026-08-09

Shin Bet Indicts Ashkelon Couple for Months-Long Surveillance Campaign for Iranian Intelligence Paid in Cryptocurrency

BLUFIran's Telegram-and-crypto recruitment model trades agent quality for volume and deniability, forcing Israeli counterintelligence to defend against a diffuse threat it cannot interdict at the network level.

Tel Aviv prosecutors indicted Israeli citizen Tamerlan Amshukov, 26, and Ukrainian citizen Alina Kushnirenko, 24, last Thursday, following their July 12 arrest in a joint Shin Bet and Israel Police Lahav 433 investigation 1. Amshukov was charged with contact with a foreign agent and 16 counts of providing information to the enemy; Kushnirenko with eight such counts 1. According to the indictment, the pair was recruited via Telegram by handlers known as "Aslan" and "David" and directed, between April and July, to photograph residential targets in four Israeli cities, an Eilat naval area and port, and Jerusalem's Mount Herzl cemetery and museum 123. Prosecutors said the two received roughly $4,450 in cryptocurrency, with $2,300 further owed, and initially denied knowing they worked for Iran before acknowledging they understood this during the Eilat mission and continuing regardless 1.

Analysis
Israel indicted Amshukov and Kushnirenko after Telegram handlers "Aslan" and "David" steered the pair from petty errands into surveillance of an Eilat naval port, a defense-industry residence, and a security-service member's home, coaching them to find camera blind spots at a shopping mall, indicating handlers actively manage operational security rather than trusting recruits' own tradecraft. Cryptocurrency micropayments and disposable civilian operatives, continued even after the two acknowledged Iranian sponsorship, mark a transactional, crowdsourced recruitment model that lowers Tehran's cost per operative and complicates preemption of taskings originating from anonymous online contact. Convergent coverage across four outlets traces to a single Shin Bet and police statement, leaving one outlet's citation of the indictment as the sole independent check. The operatives' repeated botched or abandoned taskings point instead toward opportunistic exploitation of financially vulnerable recruits rather than a professionally run collection cell.
5 sources
  1. Ashkelon couple indicted for allegedly spying for Iran in exchange for cryptocurrency - The Jerusalem Post
  2. Two Ashkelon residents indicted for spying on behalf of Iranian intelligence - i24NEWS
  3. Ashkelon couple indicted for spying for Iran - Ynetnews
  4. Two Ashkelon residents charged with spying for Iran - The Times of Israel
  5. ⁨כתב אישום: בני זוג מאשקלון אספו מודיעין עבור איראן - גם אחרי שהבינו מי מפעיל אותם⁩ - Walla News (citing Tel Aviv District Prosecutor's Office indictment)

View in full brief →

UNCLASSIFIED // OPEN SOURCE