Ukrainian Domestic — 2026-08-23

SBU Arrests National Guard Commander for Selling Delta Battle System Access to Russian GRU for 1000 Dollars

BLUFGRU's ability to recruit a serving special-purpose commander for $1,000 in cryptocurrency exposes a systemic insider-threat gap across Ukrainian units with battlefield network access.

The SBU and National Guard special-forces command detained a National Guard special-purpose group commander in Odesa on August 13, accusing him of acting for Russia's GRU since July 16 1Delta"" data-source="УНН (UNN)" data-url="https://unn.ua/en/news/the-national-guard-detained-a-russian-mole-he-is-suspected-of-providing-the-enemy-with-access-to-delta" data-rt="secondary" data-otype="wire">23. Ukraine's Prosecutor General's Office said that for about $1,000 in cryptocurrency, he gave Russian intelligence remote access to his "Delta" situational-awareness account by connecting an external device, exposing classified data and intelligence information 23. The SBU separately said he had torched a military vehicle in Odesa on GRU's orders and recorded it, and was to build an improvised explosive device to hand off to a courier for a terrorist attack in southern Ukraine 1. He faces high-treason charges under Article 111 and remains in pretrial detention without bail, facing a possible life sentence 123.

Analysis
The GRU breach exploited personnel vetting rather than Delta's technical architecture: the intrusion required only a compromised commander's login and a connected external device, not a network exploit. Officers with combat-zone Delta access are demonstrably recruitable for roughly $1,000 in cryptocurrency, a low bar National Guard counterintelligence must now assume applies across other special-purpose units near the southern front. The same handler tasked the commander with both espionage and sabotage, vehicle arson and an intended IED handoff to a courier, indicating GRU treats compromised insiders as multi-purpose assets. Sourcing traces to a single Prosecutor General/SBU disclosure amplified rather than independently corroborated across outlets, and the low payment and simple credential-sharing point as plausibly to opportunistic exploitation of one vulnerable officer as to a broader GRU penetration effort.

5 sources

SSU exposes enemy mole in National Guard special forces unit - GlobalSecurity.org (SSU release republication)
Russian "mole" detained in National Guard - he is suspected of providing enemy with access to "Delta" - УНН (UNN)
Військового Нацгвардії затримали за державну зраду в інтересах РФ - Ukrainska Pravda
Ukraine Situation Report: Kyiv Is Turning Soviet-Era Armor Into Robotic Combat Vehicles - The War Zone
СБУ викрила крота російського ГРУ у лавах спецпідрозділу Нацгвардії (SBU Exposes Russian GRU Mole in National Guard Special Unit) - Security Service of Ukraine (SBU) press service