T-Intelligence

Operation Cigarette Butt: Ukraine’s Covert Strike on Saki Air Base

August 15, 2022 3:15 pm August 15, 2022

Comments Off

The following analysis is an updated and revised version of our preliminary-battle damage assessment (P-BDA) released after very-high-resolution (VHR) satellite imagery of Saki Air Base surfaced online, on August 10. We assess that the explosions at Saki AB resulted from a Ukrainian attack and not a “work accident,” as described by Russian authorities.

P-BDA “hot take”

Open-source GEOINT hot take on the aftermath of Saki Air Base, using @planet imagery from @trbrtc. Analysis is preliminary/ not definitive. BMs likely behind the strike due to craters, blast radius, and extent of damage. #Hrims remain top candidates (HE + fragment warheads) pic.twitter.com/80dD2tcl8M

— T-Intelligence (@T_intell) August 10, 2022

BDA version 2 (V2)

GEOINT SHOWS MASSIVE MATERIAL DAMAGE

Ukraine’s unclaimed attack on Saki AB left the Russian Navy’s 43rd Independent Naval Attack Aviation Regiment without at total of at least 11 aircraft, an unknown number of personnel, and an unquantifiable amount of auxiliary equipment and logistics. Our Battle Damage Assessment covers the parking area and main apron.

PARKING AREA

At least ten aircraft were destroyed, disabled or severely damaged: six Su-24M/MRs (NATO/AFIC: Fencer) and four 30SMs (Flanker-H).
Two buildings collapsed;
an unquantifiable amount of auxiliary material and other logistics was destroyed. The August 9 image shows hundreds of crates holding unknown contents (probable munition, fuel, spare parts, etc.) are stockpiled near the aircraft in the parking area. The largest stockpiles are in front of the two service buildings and on the cement pads usually used for parking aircraft. These areas appeared cratered in the post-blast image, likely the scene of the major explosions filmed by holidaymakers.

APRON

Burn marks are visible on the westernmost parking slot, but no aircraft wreckage is visible on the August 10 imagery. However, at least one Su-24 was destroyed on the apron as per a social media video. The Russians could have removed the damaged aircraft or whatever was left of them before the satellite passed overhead.

Footage has emerged from Novofedorivka showing a completely destroyed Russian Su-24 pic.twitter.com/D4U6V9B2zO

— OSINTtechnical (@Osinttechnical) August 9, 2022

One administrative building was severely damaged.

NOTE

Compared to the P-BDA, V2 contains the before-explosion imagery (August 9), improves the visual communication of the initial analysis, adds more context to the cratered areas, re-labels a largely nondescript aircraft wreckage as a Su-30SM (previously mislabeled Su-24), and re-assesses the main apron damage (no aircraft wreckage visible on August 10). BDA V2 also highlights a damaged administrative building that was not marked in the P-BDA. Other noteworthy BDAs can be found here, here, and here, among others.

MODUS OPERANDI TO REMAIN UNKNOWN

At the time of the writing of this report, there is still no definitive proof as to what weapon system carried out the attack. There is no hard evidence to break the tie between a missile strike and a SOF operation (both raid and stand-in strike).

HRIM?

In our “hot take” we assessed that short-range ballistic missiles (SRBMs) are most likely behind the strike, with the indigenous Hrim as the probable culprit. Other theoretical, albeit less likely, options are an extended range Tockha-U (Scarab), R-360 Neptune in a land-attack role, or ATACMS – the US has denied supplying the missile for Ukraine’s HIMARS.

Hrim has the range and payload to reach and prosecute Saki AB. Akin to the 9K270 Iskander (Stone), Hrim possesses certain kinematic characteristics that could allow it to evade Russia’s local multi-layered air defenses. It is also public knowledge that the Ukrainian defense industry has produced a small number of prototypes. As seen in the case of the Neptune program, war conditions can force a developing missile into limited service.

Hrim-2 SRBM in desert camouflage

Tactical Report has a comprehensive report from January 2022 on the Hrim, including an exclusive update on the program’s status from the Saudi side, the financier and primary beneficiary of the SRBM project.

The SRBM theory continues to be backed by some circumstantial evidence, such as the craters, extent of damage, and even a possible missile magnetic signature detection. However, upon re-evaluation in the following days, we found that alternative explanations (see here and here) are also very likely and cannot be discarded.

Probably the most credible alternative is a short-range strike by SOFs with bomb-laden quadcopter drones or portable loitering munitions. These strike platforms do not have the payload to cause mass destruction, but they can ignite the presumed ammo dumps in the parking area.

INSUFFICIENT EVIDENCE

Most available evidence, including the presence of craters and eyewitness videos from the event, can support both hypotheses in certain variations. Some key evidence is also missing, such as recovered attack system debris which could suggest a stand-off missile strike or bomb-laden drone launched by SOFs. There are also too many unknowns about crucial data points – e.g., contents of crates that exploded. Some likely held ammunition and fuel, as suggested by the massive detonations in the videos, but others may have not.

OPSEC

Both US and Ukrainian officials are keeping a tight lip over what happened. However, separate unofficial Ukrainian reports have mentioned the use of a “device of Ukrainian manufacturing” (New York Times) and the work of SOFs and/or partisans (Washington Post). These reports can also be interpreted as both complementing and contradicting each other, adding to the information fog surrounding the event. Even Presidential Military Advisor Oleksiy Arestovych has put forward both theories to explain the attack.

Ukraine does want to reveal further information about the attack on Saki Air Base due to political and operations security reasons. Regardless of how the operation unfolded, the strike underlines a series of weaknesses in the Russian-occupied “fortress Crimea” including in air defense and/or perimeter security.

by HARM

Comments Off

Cold War 2.0 Euro-Atlantic Ex-Soviet

Flashpoint Snake Island: Why Russia Wanted the “Rock” in the Black Sea

HARM

July 27, 2022 6:39 pm July 27, 2022

Comments Off

Snake Island, or Serpents Island (Ostriv Zmiinyi in Ukrainian; Insula Serpilor in Romanian) is an islet off Ukraine’s southwestern coast and near the Danube Delta in the Black Sea. With…

Snake Island, or Serpents Island (Ostriv Zmiinyi in Ukrainian; Insula Serpilor in Romanian) is an islet off Ukraine’s southwestern coast and near the Danube Delta in the Black Sea. With a surface of 17 ha, the islet became a major flashpoint between the Ukrainian Operational Command-South and the Russian Navy, following the Russian seizure of Snake Island on 24 February 2022. Persistent Ukrainian counterstrikes forced Russia to retreat on 30 June 2022, ending a 127-day occupation. Following Ukraine’s victory, many have questioned the military and political value of the bitterly contested island. Our analysis seeks to shed light on Snake Island’s multilayered significance in the Black Sea and Odesa theaters of operations.

KEY JUDGEMENTS

I. Occupied in the opening hours of the invasion on 24 February 2022, Snake Island held, and still holds, kaleidoscopic importance for Moscow’s objectives in southwestern Ukraine and the Black Sea, including against NATO. Snake Island’s significance spans across all three levels of war – tactical, operational, and strategic – and serves three goal lengths, as follows:

A.Short-term: Support the Odesa Offensive and Anti-Shipping Mission.

Secure the seaway to the Ukrainian shoreline in preparation for Russia’s planned amphibious assault on Odesa- part of the failed Operational Direction-Southwest (OD-SW).
Seize key maritime terrain to support the interdiction of the Odesa-Bosphorus shipping lanes and subsequent blockade of Ukraine’s port.

B. Medium-term: Become a thorn in NATO’s Southeastern Flank.

Establish a SIGINT listening station (COMINT and ELINT included) to monitor NATO activities in SE Romania.
Expand offensive potential: kinetic effectors and electronic warfare (EW) systems.

C. Long-term: Seize lucrative offshore gas platforms located in NATO member Romania’s Exclusive Economic Zone (EEZ).

Contest and claim parts of Romania’s EEZ, which has an estimated potential of 200 billion cubic meters of natural gas. The XIII Pelican, EX-27 Muridava, and EX-28 EST Cobalcescu concessions are likely targets. The development of the Black Sea gas fields would make Romania the European Union’s biggest natural gas producer and, inherently, a competitor to Russian gas.
Russia has similarly captured all energy-rich parts of Ukraine’s EEZ since “little green men” annexed Crimea in 2014. Extending into new reserves aligns with Russia’s plans to assert military and economic dominance over the Black Sea.

II. Ukraine’s constant barrage of missile and artillery strikes successfully extirpated the Russian presence on Snake lsland. Bayraktar TB-2 combat drones conducted at least ten kinetic operations and were involved in a number of ISR and fire control taskings. The R-360 Neptune and Harpoon anti-ship missiles (AshMs) also played a key role, countering the Russian Navy’s sea-lines-of-communications (SLOC) and sinking at least six vessels, including the Russian Black Sea Fleet (BSF) flagship Moskva. At least one manned aircraft strike was recorded and featured a low-altitude bombing by a pair of Su-27s (AFIC/NATO Reporting name: Flanker). Artillery systems such as the homegrown 2S22 Bohdana were responsible for putting the last nail in Russia’s coffin, decimating the man-made infrastructure on the island until the occupiers were left with no physical cover.

III. It is imperative that Russia does not re-capture Snake Island, even at the cost of the island becoming “no man’s land .” At the time of writing, Snake Island is in limbo – vacated by the Russians, re-claimed by Ukraine, but not yet re-garrisoned. Even if Ukraine does not create an outpost on the island, keeping the key maritime terrain from Russia’s hands is enough to deny Moscow’s original objectives.

Change detection analysis of Snake Island pre-invasion (Google Earth imagery from 2016) and post-withdrawal of Russian forces (30 June 2022). Imagery credits: Maxar Technologies; annotated by T-Intelligence.

SHORT-TERM OBJECTIVES: ODESA OFFENSIVE AND ANTI-SHIPPING MISSION

SECURE SEAWAY FOR ODESA OFFENSIVE a.k.a OD SW

1. Russia seized Snake Island from Ukrainian forces to secure the SLOC in preparation for an amphibious assault on Odesa- part of the Odesa offensive, designated Operational Direction Southwest (OD-SW). A Russian Navy (RuN) surface action group led by the now-sunk Slava-class Moskva was in charge of the operation, which took place in the early hours of February 24. Immediately after the takeover, Russian marines garrisoned the island to deny key maritime terrain to Ukraine and exploit its tactical-operational value.

2. Russia started to turn Snake Island into an expeditionary outpost in support of the maritime component of OD-SW. Russian forces had anchored patrol boats near the island and, also pressed by Ukrainian air strikes, deployed short-range air defenses (SHORAD). In addition, Snake Island could have been used to base forward arming and refueling points (FARP) to boost sortie rate and repetition during air-naval attacks on Odesa and naval intelligence, surveillance, and reconnaissance (ISR) assets.

3. The collapse of OD-SW in the steppes of Kherson operationally “orphaned” Snake Island. Ukraine’s Operational Command-South (OC-S) defeated the Russian Southern Military District (MD) grouping at Mykolaiv and Voznezensk and drove the invaders down to Kherson city in mid-March 2022.

Assessed Russian OD-SW map, reprinted from “Target Transnistria: Russia’s Maskirovka and Pathways to Escalation (Threatcast)” (T-intelligence)

4. Russia’s follow-on plans for Snake Island largely depended on capturing the Odesian littoral. Russian control of the shoreline would have secured Snake Island from land-based threats. But with OD-SW in shambles and the Odesian coast still under Ukrainian control, the Russian garrison on Snake Island became a fixed, vulnerable target. The new situation likely prompted Sevastopol commanders to effect a cost-benefit analysis of abandoning versus defending the island, with the top brass opting for the latter. As Ukraine’s OC-S started lashing back with air, artillery, and anti-ship missile strikes at Snake Island, the Russian forces were forced on the defensive.

Sevastopol’s attempt at holding Snake Island despite the terrain entering a state of tactical limbo indicates operational stubbornness, continued interest in the Odesa offensive as a later option, and commitment to longer-term political objectives. The latter point rendered Snake Island a politically-charged issue, which most likely influenced Sevastopol’s decision to stay.

TOLLBOOTH TO INTERDICT MARITIME SHIPPING

6. The secondary objective of Russia’s designs on Snake Island was to augment the BSF in interdicting the shipping lanes to and from Ukraine. Part of this plan was to deploy land-based anti-ship missiles, coastal surveillance radars, and naval ISR assets on Snake Island. There were also indications of plans to base fast patrol craft out of the island. While BSF warships and naval aviation are primarily conducting the anti-shipping mission, a sensor-effector pair on Snake Island could have provided an additional layer to Russia’s maritime construct.

Annotated screenshot of MarineTraffic.com density map (T-Intelligence). As the map shows, Snake Island overlooks the main trade artery in the western half of the Black Sea.

7. Snake Island never got to contribute to the anti-shipping mission as the Russian occupants were busy surviving Ukraine’s constant barrage of missile and artillery strikes. Based on open-source reporting, Ukraine conducted at least 16 separate attacks on Russian positions between March and late June. Bayraktar TB-2s initially spearheaded ten kinetic operations and were involved in a number of ISR and fire control taskings. The R-360 Neptune and Harpoon anti-ship missiles (AshMs) also played a key role, countering the RuN’s SLOCs, and sinking at least six vessels, including the BSF flagship Moskva. At least one manned aircraft strike was recorded and featured a low-altitude bombing by a pair of Su-27s (AFIC/NATO Reporting name: Flanker)

Footage reportedly shows a pair of #Ukrainian Su-27 Flankers conducting low-level airstrikes on the Russian-occupied Snake Island in the #BlackSea. #UkraineRussiaWar pic.twitter.com/BUwuwx7KCC

— FUNKER (@FunkerActual) May 7, 2022

Ukraine used domestic Bohdana self-propelled howitzer to liberate Zmiinyi (Snake) Island – 🇺🇦Army Commander Zaluzhnyi

Zaluzhnyi also thanked foreign partners for provided weapons, said Russians retreated after 🇺🇦 artillery, missile & air strikeshttps://t.co/drnsjHP8jB pic.twitter.com/Q7R9EurIUW

— Euromaidan Press (@EuromaidanPress) June 30, 2022

Artillery systems such as the homegrown 2S22 Bohdana were responsible for putting the last nail in Russia’s coffin, decimating the man-made infrastructure on the island until the occupiers were left with no physical cover.

8. In response to Ukraine’s hammering, Sevastopol rushed 9K35 Strela-10 (SA-13 Gopher), Pantsir S-1 (SA-22 Greyhound), and Tor-M2 (SA-15 Gauntlet) SHORADs along with ZU-23-2 anti-aircraft (AA) guns to the island, but with little effect. Ukraine destroyed most of the AA guns and SHORADs, especially the first batches of Strelas. With just 17 ha to rove around to escape Ukrainian targeting, the SHORADs were likely more offline than active and therefore suppressed.

Two hours before the ZU-23-2 strike, a Ukrainian TB2 struck a Russian Strela-10 short-range air defense system on Snake Island. https://t.co/rbTvheDN0n pic.twitter.com/nt1D9PvBES

— Rob Lee (@RALee85) May 2, 2022

9. The loss of Snake Island had little effect on Russia’s anti-shipping mission, which continues to be spearheaded by BSF surface action groups and naval aviation. Ukraine’s increasingly diverse and lethal coastal artillery and multi-rocket launcher systems (MLRS), often paired with unmanned aerial vehicles (UAVs), have re-shaped the BSF’s risk assessment. Early signs indicate that Russian vessels are now forced to operate at arm’s length from the Ukrainian littoral.

MEDIUM-TERM OBJECTIVES: LISTENING STATION AND OFFENSIVE POSTURE

LISTENING STATION

10. Left unchecked, the Russian occupation could have filled Snake Island with antennas, direction-finders, and other technical equipment to collect Signals Intelligence (SIGINT) on key military facilities in NATO member Romania’s southeast (SE). Just 40 km from Romania, the unrealized Snake Island listening station would have likely pointed its antennas at Mihail Kogalniceanu and Fetești air bases and command & control (C2) nodes to collect Communications Intelligence (COMINT). Electronic intelligence (ELINT) would have been an equally valuable objective, with specialized equipment attempting to collect, analyze and classify Romanian and NATO radar emissions to paint what is known as EOD, or electronic order of battle. An EOD typically contains the location of radars, frequencies, and operating bands used by said radars, emission signatures, etc.

11. Russia had already deployed some SIGINT equipment to Snake Island, according to the Secretary of Ukraine’s National Security and Defence Council (RNBO) Oleksii Danilov. The same source says that Russia already leveraged Snake Island’s position to monitor communications in Odesa province and Transnistria – read more about the breakaway region in our recent threatcast.

ENHANCED OFFENSIVE POSTURE

12. It is likely that Russia would have also sought to expand the island’s offensive potential with the deployment of a few but suitable systems in time. MLRS could have been a likely candidate to build up the island’s offensive posture, providing an attritable but effective firing solution. The BM-30 Smerch, with its assortment of 300mm rockets and warheads, can strike areas 90 km away. More high-end systems such as the K-300P Bastion (SS-C-5 Stooge) could have also been considered. Packing a double-punch against land targets and ships 300 km away, Bastion is uniquely suited for coastal-based engagements. However, the island’s small and complex surface would have posed a continuous limitation regarding build-up potential (i.e., number of systems) and system survivability (limited shoot-and-scoot).

13. Besides kinetic effectors, Electronic Warfare (EW) systems would have been some other logical candidates for beefing up Russia’s offensive posture. Examples are the Krashuka, 1L22M Avtobaza-M, and Repellent-1. With a powerful electronic attack (EA) capability, Russia’s EW systems can jam communications, navigation systems such as GPS, and drone down/up-links, to ranges in excess of 250 km. Some systems like the Krashuka-4 can even jam spy satellites in the Low-Earth orbit (LEO). Russian EW systems have been present in Ukraine since the early days of the invasion, with some being captured and destroyed by Ukrainian forces.

LONG-TERM OBJECTIVE: BLACK SEA ENERGY THEFT

14. The Kremlin’s long-term goal was, and likely still is, to leverage Snake Island’s position to contest Romania’s energy-rich exclusive economic zone (EZZ), which holds an estimated 200 billion cubic meters of gas. We assess with a high degree of confidence that Russia would have rejected the 2009 Hague ruling on the Ukrainian-Romanian Snake Island dispute.

Key Background: In 2004, the Romanian government asked the Hague International Court of Justice (ICJ) to rule on the maritime boundary between Ukraine and Romania. The decision depended on whether the ICJ defined Snake Island as an island, part of Ukraine’s continental shelf, or an islet (i.e., “a rock” in Romania’s terms). In 2009, the ICJ ruled that Snake Island was too far from the seashore (Odesa) and small to constitute a benchmark in setting boundaries. The ICJ ruling satisfied 80 percent of Romania’s claims over the continental shelf and placed 9,700 square kilometers of waters under Bucharest’s control.

15. Russian claims over Romania’s EEZ are difficult to threatcast but would most likely include at least the gas fields closest to Snake Island:

XIII Pelican: gas potential confirmed (discovery wells are yet to be appraised). Black Sea Oil & Gas (BSOG), which is owned by Carlyle International Energy Partners and the European Bank for Reconstruction and Development, holds the majority package to XIII Pelican.
EX-27 Muridava: gas potential confirmed and estimated at 169 billion cubic feet. British company Petroceltic holds the majority package.
EX-28 Nicolae Colbacescu: gas potential confirmed and estimated at 404 billion cubic feet. Muriadava and Colbacescu are underexplored and believed to hold more oil and gas deposits. Estimates for the two concessions are extracted from the 2013 Petroceltic annual results presentation and could be dated.

Key Background: The development of the Black Sea gas fields would make Romania the European Union’s biggest natural gas producer, according to the Oil and Gas Employers Federation (FPPG). Romania would not only become self-sufficient* but also compete in the natural gas market with Russia. Romania currently imports less than most European Union members (nearly 21 percent).

16. The most likely course of action would have been for RuN warships to ascertain de facto control over the targeted gas fields and escort Russian drillships to start exploitation. Sevastopol can profit from the Romanian Navy’s inability to police its waters following decades of underinvestment. From a political standpoint, the Kremlin would most likely leverage the grey zone nature of EZZs in the context of NATO’s Article 5. EEZs do not constitute territorial waters, and disputes over offshore energy deposits exist even within the Alliance (e.g., Turkey-Greece). However, Russia will probably tread lightly and probe NATO unity and Western European/North American commitment to the Black Sea states.

17. Due to the Montreaux Convention, NATO cannot establish a permanent, large-scale naval presence in the Black Sea. However, NATO assists Romania (and Bulgaria) through periodic port visits by individual warships or joint fleet units called NATO Standing Maritime Groups. NATO Enhanced Air Policing is another means to protect Romanian interests in the Black Sea, especially if the fighter units are also outfitted for anti-shipping. Despite continuous Allied support, local allies must do the heavy lifting through defense procurement to be able to police their territorial waters and EZZs.

18. Russia took over all energy-rich parts of Ukraine’s EEZ in a similar manner since “little green men” annexed Crimea in 2014. The Tavrida gas platforms, nearly 10 km east of the Snake Island, are one of the most forward-positioned offshore energy platforms that Russia has stolen from Ukraine. Ukraine recently hit the Tavrida gas platforms with two AshMs. Extending into new reserves aligns with Russia’s plans to assert military and economic dominance over the Black Sea.

Ukrainian Operational Command South released a video of a Neptune ASM hitting the Tavrida oil rig. pic.twitter.com/MPsBsCeCky

— OSINTtechnical (@Osinttechnical) July 11, 2022

19. Russia can still deter Bucharest from extracting gas from the Black Sea and attack (overt or cover) Romanian offshore energy infrastructure and drillships. RuN Spetsnaz units, subordinated to the Main Intelligence Directorate (GU), are uniquely qualified to conduct deniable attacks against drillships, offshore platforms used for housing and logistics, and oil rigs. Russian warships can stage shows of force and engage in a slate of other intimidation tactics, for example, exercises with subsequent notice to mariners/airmen (NORAM/NOTAM) that cover parts of Romania’s EEZ. If such provocations continue, Russia may discourage foreign investments in Romania’s offshore gas fields and prevent drilling activities completely.

Photos taken a few days ago by workers at Ana gas production platform (located 120 km offshore in the Romanian Black Sea exclusive economic zone). Russian Navy seems active in a wider area (but very carefull not to approach Romania’s territorial sea). pic.twitter.com/JXE1DSsds0

— Sorin Melenciuc (@SorinMelenciuc) June 16, 2022

20. Russian warships have already shadowed Romanian gas platforms in June 2022, telegraphing a not-so-veiled reminder of Moscow’s ambitions in the Black Sea. It is imperative that Russia does not re-capture the island at any given time. Even if Ukraine does not establish an outpost on the island, keeping the key maritime terrain from Russia’s hands is enough to prevent Moscow from achieving its medium to long-term objectives in the western Black Sea. Snake Island is a fitting example of how even a tiny Russian land grab has far-reaching implications for Euro-Atlantic security.

by HARM

This assessment was made using Open-Source Intelligence (OSINT) techniques and resources. Visit Knowmad OSINT to learn more about our online OSINT training.

Comments Off

Cold War 2.0 Ex-Soviet

Target Transnistria: Russia’s Maskirovka and Pathways to Escalation (Threatcast)

HARM

May 8, 2022 9:10 am May 8, 2022

Comments Off

KEY JUDGEMENTS I. We assess that Russian intelligence staged the recent provocations in Transnistria as part of a military deception campaign (“maskirovka”). Russia aims to prevent Ukrainian forces in Odesa…

KEY JUDGEMENTS

I. We assess that Russian intelligence staged the recent provocations in Transnistria as part of a military deception campaign (“maskirovka”). Russia aims to prevent Ukrainian forces in Odesa province from reinforcing positions in Donbas and Kherson.

II. The Transnistrian maskirovka is contingent and could escalate into more palpable operational objectives in the short term. While the Operational Group of Russian Forces in Transnistria (OGRFT) is unfit to engage in significant combat, we cannot ascertain that Moscow will see the Group’s precarious condition as an obstacle to joining the fight. One possible scenario is that the OGRFT could attempt to contest or seize the Palanca road segment of the Reni-Odesa highway – controlled by Ukraine although on Moldovan territory (Stefan Voda raion).

III. We assess that the Kremlin retains the intention of linking up with Transnistria, but the Russian military is operationally unable to reach this goal in the medium term. The vast majority of Russian battalion tactical groups (BTGs) are committed to Donbas and Kherson, where they are desperately needed, and continue to suffer a heavy attrition rate.

IV. We have threatcasted three notional scenarios that Russia might consider at any given time to link up with Transnistria:

landbridge from Kherson to Transnistria (via Odesa);
air assault into Tiraspol;
amphibious landing in Budjak province followed by an incursion into Moldova’s Stefan Voda raion.

These scenarios are purely imaginative and do not aim to predict to future. Instead, their role is to reduce uncertainty.

SITUATION REPORT: RUSSIA ENGINEERS A POTENTIALLY MALIGN DISTRACTION

OGRFT: THE FORGOTTEN “LITTLE GREEN MEN”

1. The self-proclaimed and unrecognized “Pridnestrovian Moldavian Republic” hosts roughly 1,000 to 1,500 Russian soldiers as part of the Operational Group of Russian Forces in Transnistria (OGRFT). The OGRFT is the “peacekeeping force” Russia left behind after the 1992 invasion of Moldova. It is a direct successor to the locally-based Soviet 14th Guards Army, which served under the command of the Odesa Military District. The OGRFT consists of three units:

-82nd Separate Guards Motorized Rifle Battalion [unit 74273]

-113th Separate Guards Motorized Rifle Battalion [unit 22137]

-540th Separate Command Battalion [unit 89353]

Together these three units could likely assemble only one battalion tactical group (BTG) – Russian Ground Forces’ (RGF) combined-arms formations for combat use. Based on our open-source research, all three OGRFT units are headquartered at Karl Liebknecht 159, Tiraspol, Republic of Moldova. However, the units are most likely garrisoned elsewhere, as the Soviet-era military quarter has been largely abandoned and re-purposed into new apartment projects.

GEOINT: Overview of OGRFT HQ and assessed affiliated sites in Tiraspol

2. The OGRFT has three operational objectives in the region:

-Patrol the Transnistrian border (and engage in the related capacity-building efforts)

-Guard ammunition storage sites in Transnistria.

-Serve Moscow’s interest in whatever way necessary.

3. While the OGRFT is probably the most ill-equipped and undertrained force in the entire Russian Armed Forces, it does pose a serious threat to the Moldovan military and could become a tactical distraction for Ukraine.

MASKIROVKA: KEEP UKRAINIAN UNITS FIXED IN ODESA, AWAY FROM “REAL FIGHT” IN KHERSON, DONBAS

4. We assess that Russian intelligence staged the recent provocations in Transnistria as part of a military deception campaign (“maskirovka”). Russia aims to prevent Ukrainian forces in Odesa province from reinforcing positions in Donbas and Kherson. Russia’s remaining main lines of effort (LOEs) in the invasion are the Donbas offensive and consolidating gains in Kherson province. Ukrainian reinforcements in these theaters could put a decisive dent in Russia’s sluggish and largely unsuccessful operations.

5. Russian intelligence – likely FSB units attached to the OGRFT – orchestrated a series of incidents in Transnistria:

a rocket-propelled grenade attack on the so-called “Ministry of Security;”
two destroyed antenna towers in Grigoriopol raion (used to broadcast Russian radio channels).
claimed gunshots towards Cobasna village which hosts a Soviet-era ammunition depot.
explosions at Tiraspol airfield (confirmed by Moldovan authorities).
Reported explosions at a border crossing with Ukraine.

6. The “local government” responded by placing the Transnistrian military on high alert and ramping up anti-Romanian and anti-Ukrainian rhetoric. Moldovan and Ukrainian press outlets report that the Transnistrians have established checkpoints throughout the region (confirmed via social media photos), and are preparing for general mobilization (claim denied by the Transnistrian “authorities”). Tiraspol has placed its military on high alert according to the Ukrainian General Staff.

MASKIROVKA IS CONTINGENT, ESCALATION POSSIBLE

7. While the recent provocations constitute a benign feint, the OGRFT’s maskirovka is contingent and could escalate into more palpable operational objectives in the short term. To craft a credible threat that will force the Ukrainians to divert attention to the Dniester river, the OGRFT (with or without the Transnistrian military) could launch limited cross-border attacks. Alternatively, although less likely, the OGRFT could launch a limited land incursion.

8. One possible scenario is that the OGRFT could attempt to contest or seize the Palanca road segment of the Reni-Odesa highway – controlled by Ukraine although on Moldovian territory (Stefan Voda raion). Chisinau transferred the 7.7 km road segment near Palanca to Ukraine as per the Additional Protocol (AP) to the Treaty between the Republic of Moldova and Ukraine on the State Border (August 18, 1999). The two parliaments ratified the AP in 2001.

Palanca Road (T-Intelligence 2022)

The Palanca road is now the sole remaining ground line of communication (LOC) between NATO member Romania and the eastern raions of Odesa province, as Russia bombed and damaged the Pidyomnyy bridge near Zatoka on April 26. The

Russia bombed the Pidyomnyy bridge for military and economic reasons. On the one hand, Russia wanted to disrupt the flow of Ukrainian products exported through the Romanian seaport of Constanta as Russia has blockaded Odesa and the other Ukrainian ports. On the other hand, with the bridge disabled, Russia severed NATO’s most direct LOC with Ukraine’s frontlines.

9. While the OGRFT is unfit to engage in significant combat, we cannot ascertain that Moscow will see the Group’s precarious condition as an obstacle to joining the fight. Based on our estimates, Belarusian President Lukashenko’s war map, and other indicators, Transnistria was scheduled to join the now-failed Southwestern Operational Direction (OD). The OGRFT and the Russian Southern Military District (MD) grouping would have linked up in the process.

Transnistrian and Russian link-up to take Odesa is shown in Lukashenko’s warplan presentation (modified version of EyePress News/Shutterstock image)

RUSSIA-TRANSNISTRIA LAND-BRIDGE UNFEASIBLE IN NEAR TERM

10. We assess that the Kremlin retains the intention of linking up with Transnistria, but the Russian military is operationally unable to reach this goal in the medium term. Sandwiched between a pro-European & NATO-friendly Moldova (Maia Sandu government) and a hostile Ukraine, the OGRFT is vulnerable to an attack. However, Russian BTGs are committed to Donbas and Kherson, where they are desperately needed, and continue to suffer a heavy attrition rate. A significant portion of BTGs is combat ineffective and close to collapse. Re-deployment will most likely not be an option. On its own, the OGRFT is unlikely to be able to break through Ukrainian territory and spearhead a landbridge. The calculus could change if Russia declares a general mobilization and generates new manpower.

THREATCAST: THREE NOTIONAL SCENARIOS FOR A RUSSIA TO LINK UP WITH TRANSNISTRIA

We have threatcasted three alternative future scenarios that Russia might consider to link up with Transnistria:

Landbridge from Crimea to Transnistria (via Kherson-Mykolaiv-Odesa).
Air assault on Tiraspol.
Amphibious landing in Budjak.

Disclaimer: Please note that the following scenarios are speculative and present a loose snapshot of possible war plans. This threatcast aims to consider some, but not all, of Russia’s possible actions in Transnistria – caveats apply.

LAND-BRIDGE (TRIED AND FAILED)

11. This scenario looks at a land corridor from Crimea to Transnistria, drawing from Russia’s tried-and-failed Southwestern OD. Such an objective would require an extensive, multi-stage offensive that would be costly and grinding for Russia. However, for the sake of this exercise, let us consider the conditional victories for Russian forces to “shake hands” with the OGRFT by land:

Scenario 1: Land Bridge via Odesa (T-Intelligence 2022)

a. Starting from Crimea-Kherson, Russia would need to isolate or capture Mykolaiv and cross the Bug river. Considering that Ukrainian forces would likely destroy the bridges to stall or stop the offensive, Russia would need to set up pontoon bridges in select areas while under fire from the opposite shore.

b. Once across the Bug, Russian forces would need to cross the Tylihul. If successful here, the Russians would secure their LOCs and ensure a steady flow of logistics across the two rivers.

c. Isolating or capturing Odesa would be the invading force’s next and most draining objective. Besieging Ukraine’s third-largest city – over 1 million people – would be a gargantuan effort in terms of time, resources, and manpower. From a humanitarian perspective, the brutal two-month siege of Mariupol would be a cakewalk in comparison.

d. The OGRFT could join the fight as a support element and link up with the Russian forces around Odesa in the process. However, a successful land bridge would depend on the long-term control of the Kherson-Odessa corridor.

12. Russia has already pursued this blueprint and failed in the early stage of the Southwestern OD campaign – it cannot replicate it soon. Unable to capture Mykolaiv, Russia chose to (unsuccessfully) isolate the city and look for a gap in Ukrainian defenses up the Bug river valley. A small contingent of forces advanced to Voznesensk (March 3) in an attempt to take the city and cross the Bug. Fearing that a Russian victory in Voznesensk would greenlight the OGRFT to open the second front, Ukraine blew up the railway bridge over the Kuchurhan river on March 4. After days of fighting, Ukrainian defenders crushed the Russian advance between March 13-16 and launched a counter-attack. Ukrainian forces chased the Russians down to Mykolaiv and ultimately drove them back to Kherson, where the Russian Southern MD grouping remains today. Given the premature failure, the OGRFT was never called up to assist.

AIRBORNE ASSAULT ON TIRASPOL

13. Link-up with the OGRFT via airbridge is possible, although the operation would have a low-probability of success (LOS). The Russian Air Assault Force (Vozdushno-desantnye voyska Rossii/VDV) would spearhead the mission supported by rotary-wing units from the Russian Aerospace Forces (RuAF) to airlift troops and equipment such as BTRs, artillery, and rocket launchers. Airfields in Crimea and Kherson are possible embarkation points, while Tiraspol airfield is the projected end destination. Infiltration routes are of two categories – through denied airspace or around it – posing a wide array of issues and hazards.

Scenario 2: Air Assault on Tiraspol

a. Pathway 1 (Direct Flight: Chernobayanka to Tiraspol, 230 km): Probably the most LOS route. VDV would launch from an airfield regularly hit by Ukrainian artillery, flying over a high-risk air defense area. There is likely a high density of Ukrainian-operated man-portable air defense systems (MANPADS) with operators on high alert and increased readiness in the Mykolaiv-Odesa area. MANPADS of various ranges and kinematic effects provide a diverse and overlapping low-altitude, short-range coverage. Russian helicopters would need to fly low to minimize exposure to the Odesa-based S-300 radars, which would bring them right into the engagement envelope of MANPADS.

b. Pathway 2 (Avoid Odesa: Chernobayanka to Tiraspol, 340-360 km): This flight path significantly increases survivability by circumnavigating the large MANPADS concentration in the Odesa-Mykolaiv axis and S-300-controlled airspace. However, portable or mobile air defenses are likely also positioned west of Odesa, and increased flight time will limit the maximum take-off weight of the attack and transport helicopters. The longer the flight time, the higher the chances that NATO and Ukrainian sensors will detect the airborne assault from an early stage.

c. Pathway 3a (Direct flight: Crimean airfields to Tiraspol, 350-400 km): Another low survivable flight path. Flying through the S-300 “bubble” requires significant electronic warfare (EW) and anti-radiation support. The RuAF will likely need to conduct suppression of enemy air defenses (SEAD) sorties to open up the airspace for the VDV flight to Tiraspol. For example, the VDV’s assault on Hostomel airfield through Ukrainian air defenses was also enabled by a combination of electronic and missile attacks according to a RUSI report . However, the large density of MANPADS in Odesa poses a constant threat to low-altitude air operations., especially if the assault is not done under the cover of darkness.

d. Pathway 3b (Avoid Odesa: Crimean airfields to Tiraspol, 350-500 km): Probably the most survivable flight path but also the longest, which restricts airlift capacity (troop number and equipment quantity) and exposes the operation the most to NATO and Ukrainian radars and ISR assets (intelligence, surveillance, and reconnaissance).

Note: The VDV is one of the most attrited Russian service branches in the war in Ukraine. Significant regeneration would be required before the VDV could hope to pull off such a stunt.

AMPHIBIOUS ASSAULT ON BUDJAK

14. Following the forced closure of the Pidyomnyy bridge, many have speculated that Moscow may be eyeing an amphibious assault on Ukraine’s Budjak region (southern Bessarabia) – Ismail, Bolhrad, and Bilhorod-Dnistrovsky raions in western Odesa province. Russia’s supposed bet is that the landing would be unopposed as Budjak is undermanned by the Ukrainian military and largely disconnected from the rest of the country.

Scenario: Amphibious Landing in Budjak

15. An amphibious assault on Budjak is theoretically possible but technically difficult and of high risk. The Russian Navy would have to assemble an armada of amphibious vehicles, landing ships and craft, frigates, and other heavy warships, supported by air assets and likely surface to surface missiles. Preparations for such an operation would leave plenty of tell-tell signs that NATO could detect and forward to Ukraine.

16. Ukraine has mined Odesa’s littoral waters and lined up its shores with anti-ship missiles (AshM), including Neptune (300 km range) and, in the future, truck-mounted Brimstones (range unknown, likely short) – as promised by British Prime Minister Boris Johnson. The Ukrainian Navy has also effectively posed a credible anti-ship threat, using Neptunes to sink the “Moskva” Slava-class cruiser and Bayraktar drones to destroy patrol boats near Snakes Island.

17. Budjak’s shore is unideal for amphibious assaults. The coastline mainly consists of small and narrow beaches excavated below the street level with no connection to road networks. Most beaches are flat and lack cover or port facilities. The defender has a clear high-ground advantage. Other areas of the Budjak are dominated by lagoons where landing parties can easily become trapped. Negotiating the terrain is possible in some areas but would make for a sluggish escape from the “deathtraps” that are Budjak’s beaches.

18. Provided the landing is successful, the amphibious force would need to bolt towards Moldova’s Stefan Voda raion and link up with Transnistria. Russian troops would need to occupy Stefan Voida raion to ensure a land link to the OGRFT and deny the last LOC from Romania’s southeast (NATO) to Ukraine. The OGRFT could help by mimicking feint attacks from Bender (Tighina) towards Anenii Noi or Causeni and distract the Moldovan military.

19. The operations’ success rests on whether the landing party could secure the Budjak bridgehead and sustain an incursion towards Transnistria at the same time. A successful Ukrainian counter-attack could split the invaders into two vulnerable pockets to be captured or annihilated.

ENDNOTE

20. Since it further invaded Ukraine in late February, Russia has demonstrated a severe lack of risk aversion regarding military action. Moscow may continue to greenlight operations that are objectively “suicidal” or “likely to fail.” Russian military commanders might interpret the operational success probability differently and assess that the payoff would offset the costs. While these notional scenarios are purely an exercise in imagination, they could be options on the table for Russia.

by HARM

editing by Gekco

Comments Off

Cold War 2.0 Ex-Soviet

Russian Mass-Casualty Attack on Civilians at Kramatorsk Train Station

HARM

April 9, 2022 10:44 am April 9, 2022

Comments Off

A Russian missile attack on Kramatorsk train station in eastern Ukraine has killed at least 50 people, likely only civilians, and wounded 100 others, on 8 April 2022. Kramatorsk hosts…

A Russian missile attack on Kramatorsk train station in eastern Ukraine has killed at least 50 people, likely only civilians, and wounded 100 others, on 8 April 2022. Kramatorsk hosts the headquarters of the Joint Force Operations (JFO), which is the Ukrainian military effort to counter the Russian occupation of Donetsk and Luhansk. After the Kremlin downsized its war aims, the JFO is bracing for a supercharged Russian offensive in eastern Ukraine.

KEY JUDGEMENTS

I. Russian forces used the Tochka-U short-range ballistic missile (SRBM), our analysis of the missile wreckage concludes. Russia still has some Tochka-Us in service despite claims to the contrary. Tochkas were filmed re-deploying from southern Belarus as early as 30 March 2022. In addition, Russia likely has a vast stockpile of combat-worthy Tochkas in reserve.

II. Russia has announced that it attacked several railways nodes in eastern Ukraine on 8 April 2022, including Slavyantsk, but refused to claim the Kramatorsk missile strike. Instead, the Kremlin is pushing a false-flag disinformation campaign to shift the blame on Kyiv.

III. The targeting of civilians might have been the sole objective of Russia’s missile strike, considering that the Kramatorsk train station is a well-known evacuation site. Violence against the enemy’s civilian population is a hallmark of Russian urban warfare.

WEAPON USED: TOCHKA-U (SS-21 SCARAB)

1. Missile debris photographed near Kramatorsk train station is consistent with the booster section of a 9K79-1 Tochka-U (AFIC/NATO Reporting name: SS-21 Scarab) short-range ballistic missile (SRBM). Various online photos and 3D renderings can be used to compare and validate. The most notable identifiers are the lattice aerodynamic rudders on the tail section, the four fins, and the metal line.

Visual analysis based on comparison between debris photo and online 3D rendering of Tochka-U (T-Intelligence 2022)

2. The Tochka-U can carry various warheads – conventional, high explosive, fragmentation, chemical, and nuclear – with a maximum payload weight of 480 kg. With a circular error probability (CEP) of 15 meters, the Tochka-U was designed for area effect in locations where collateral damage is not a concern.

TARGET: KRAMATORSK TRAIN STATION

3. Geolocation confirms that the attack took place at Kramatorsk train station. Multiple independent comparisons of eyewitness multimedia material from the target site with online images of Kramatorsk train station provide irrefutable validation.

Attack site cross-referenced with Google Maps imagery (T-Intelligence 2022)

4. A closer inspection of the target site shows that most of the destruction rained on the railway platform. The area includes an outdoor sitting area, where hundreds of civilians were waiting to evacuate by train.

TARGETING KEY EVAC CORRIDORS

5. The targeting of civilians might have been the sole objective of Russia’s missile strike, considering that Kramatorsk train station is a key evacuation site. According to the city’s mayor, around 8,000 civilians have passed through Kramatorsk train station each day for the past weeks. The railway platform and outdoor seating area absorbed most of the damage; the railway remains functional.

Please share! World must know the truth!
The 🇷🇺 occupiers hit the #Kramatorsk railway station with a Tochka-U, where thousands of peaceful Ukrainians were waiting to be evacuated.
UPD. 39 dead, including 4 children.
Voice: God, there are so many children! How many corpses! pic.twitter.com/NiuV9o4zwY

— Verkhovna Rada of Ukraine – Ukrainian Parliament (@ua_parliament) April 8, 2022

6. The high number of casualties and lack of a major impact crater is consistent with the damage caused by a fragmentation warhead. Tochka’s 9N123K fragmentation warhead contains 50 submunitions (type 9N24) that deploy thousands of metal shrapnel pieces in the target area. The use of fragmentation submunition would also explain the steady rise in the death toll – initial reports said 27 killed, but the estimate went up to over 50 in several hours.

7. Targeting Kramatorks train station to reduce its logistical potential or destroy a military shipment might have been a secondary objective. If that was the case, the Russian military would have most likely fitted the Tochka-U with a conventional high explosive warhead and concentrated the strike on the railways. Even in the unlikely hypothesis that the infrastructure was the main target, the Russian Tochka-U units showed severe and inexcusable disregard for the heavy civilian presence at Kramatorsk train station attempting to evacuate.

MISSILE LAUNCH SITE: RUSSIAN CONTROLLED TERRITORY

8. Several videos are circulating on social media show missile launches that might be related to the Kramatorsk attack.

Launch of the “Tochka” missiles from #Shakhtersk to #Kramatorsk pic.twitter.com/jy8ENjyizY

— C4H10FO2P (@markito0171) April 8, 2022

9. Preliminary geolocations put the approximate launch near Shakhatersk inside Russian-held territory. The distance from the estimated launch site to Kramatorks is 109 km, which falls within Tochka’s maximum engagement range.

On 07.04 several videos were shared of a launch from the site. #geolocated from this photo
*note* this coinsides pretty accurate with NASA FIRMS map alerts on 08.04 (red alarms on map) https://t.co/wxOmiqsO3p pic.twitter.com/pNBa6dJp95

— Not NotAnonymous (@MrWolfih) April 9, 2022

People keep asking us to Geoconfirm the launch site.
We have a possible launch location, but only from one direction.

The distance, timing and smoke trail matches the strike on #Kramatorsk.

We are looking for a second GeoConfirmation to triangulate the launch. pic.twitter.com/DrCbT0q7Oo

— GeoConfirmed (@GeoConfirmed) April 8, 2022

RUSSIA ANNOUNCED ATTACKS ON TRAIN STATIONS IN EASTERN UKRAINE

10. On the morning of 8 April 2022, the Russian Ministry of Defense (MoD) announced on Telegram that it had conducted missile strikes that “destroyed weapons and military equipment of the Ukrainian military reserves arriving in Donbass at Pokrovsk, Slavyansk and Barvenkovo railway stations.” Interestingly, the strike on Kramatorsk, the sister city of Slovyansk, was omitted.

ANNA NEWS CONFIRMED THE KRAMATORSK TRAIN STATION ATTACK (THEN DELETED IT)

11. ANNA News, a known Russian disinformation outlet, quickly confirmed the Kramatorsk missile attack on Telegram, and claimed based on “verified information” that a Ukrainian military train was the intended target. After news broke out that dozens of civilians died in the attack, ANNA News deleted the Telegram announcement. Luckily enough, many users managed to screenshot the post before it disappeared.

Kremlin affiliated media first proudly reported the #Kramatorsk massacre, claiming their missile hit an ammunition train that arrived yesterday evening.
After the appearance of civilian casualties, they started blaming Ukraine.
Same story as with #MH17 in 2014.#PutinAtWar pic.twitter.com/D3yMZSshbJ

— Julian Röpcke🇺🇦 (@JulianRoepcke) April 8, 2022

DON’T CALL IT A COMEBACK: TOCHKA-Us STILL IN SERVICE WITH RUSSIAN MILITARY

12. Despite official denials by Moscow, the Russian military still uses Tochka-U SRBMs. Some Tochkas probably never left service, while others were re-operationalized to preserve the Iskander SRBM stockpiles.

SPOTTED IN BELARUS

13. On 30 March 2022, footage posted on social media showed Tochka-U tractor erector launchers (TELs) with the Russian identification marking “V” on railcars stopped at a train station in Voevoda village, Belarus. The Voevoda rail stop is 20 km southeast of Gomel and 30 km from the Ukrainian border. Geolocation confirms the event and puts the train at 52°18’31.5″N 31°12’32.0″E. The original source, TikTok user “@_taiger_Z”, uploaded the video on 30 March 2022 (archived).

Гомель pic.twitter.com/YLesW3sSZQ

— IgorGirkin (@GirkinGirkin) March 31, 2022

a frame collage showing Tochka-Us on railcars in southern Belarus (T-Intelligence)

14. According to Conflict Intelligence Team (CIT), who checked railcar databases, the Tochka-Us were rushed to Belgorod in Russia (40 km from Kharkiv, Ukraine). The end destination suggests a likely redeployment amidst Russia’s planned focus on eastern Ukraine as part of its downsized war plans.

15. Before 31 March, a V-marked convoy, including eight vehicles consistent with Tochka-U TELs and transloaders, was filmed moving along the M10 highway from Rechitsa to Gomel. Defense blog also featured this video in an article marking the return of Tochka-Us to active service with the Russian military. The exact date of this video could not be established, but it is possible that it was filmed on the morning of 30 March, as the uploader claims.

7:50
A column of Russian equipment with “V” marks was moving from Rechitsa towards Gomel along the M10 highway.
There were at least 8 Tochka-U, several BTR-82a, about 9 KamAZ trucks, some of which are carrying Tochka-U missiles, communication vehicle and a crane. pic.twitter.com/UFF0cmrgv5

— Belarusian Hajun project (@MotolkoHelp) March 30, 2022

16. Historical weather data indicates that it snowed in Gomel between 08:30 and 10:30 on 30 March, with temperatures between -1 and 3 Celsius. In Rechitsa, the temperature was lower, ranging from -2 to -4 degrees. Optical satellite imagery could not be obtained for verification due to cloud cover. It is also possible that the video was filmed in late February, during or after the Russian-Belarussian exercises that Moscow used as cover for its deployment north of Kyiv.

Historical weather forecast for Gomel and Rechitsa (Belarus) on 30 March 2022

47th MISSILE BRIGADE LIKELY STILL USES TOCHKAS

17. Russia’s 47th Missile Brigade (Southern Military District/MD), based in Korenovsk, was still using Tochkas in 2021, according to CIT. The 47th has only received Iskander SRBMs in January 2022, and as the CIT analysts argue, the unit likely continues to field Tochkas as a stopgap measure until full operational capability of the Iskanders is achieved. The Donbas is the Southern MD’s area of responsibility.

The Russian MoD claims that Russia does not have “Tochka-U” missile systems. This is demonstrably untrue.

Russia’s 47th Missile Brigade from Korenovsk was armed with Tochka-U and received Iskander missile systems only this January, unlikely to have mastered them already. pic.twitter.com/1FHBQWlcQX

— CIT (en) (@CITeam_en) April 8, 2022

18. Hundreds of Russian Tochka-U SRBMs are likely kept in reserve and can be swiftly re-operationalized. The vast majority of Russian missile brigades retired their Tochka-U systems between 2010 and 2019 when they received the new generation of operational-tactical Iskander missiles. This means that most Tochkas have not been disabled and remain functional – most militaries allow for several years to pass until they start destroying retired equipment.

by HARM

editing by Gecko

Comments Off

Cold War 2.0 Ex-Soviet

Defeated in Kyiv, Russia Downsizes War Aims to Donbas and Southern Ukraine

HARM

April 4, 2022 10:00 am April 4, 2022

Comments Off

Key Judgements I. Defeated by Ukrainian maneuver defenses and counter-attacks, Russian forces have withdrawn from northwest Kyiv, and are reducing their presence in Chernihiv province. Returned to their launch points…

Key Judgements

I. Defeated by Ukrainian maneuver defenses and counter-attacks, Russian forces have withdrawn from northwest Kyiv, and are reducing their presence in Chernihiv province. Returned to their launch points in Belarus, the Russian military formations that are still operational or can be regenerated will most likely be redeployed to supercharge Russia’s offensive against the Ukrainian Joint Force Operation (JFO) in Donbas.

II. Downsizing the campaign to focus on Donbas is a logical adjustment following Russia’s failure to take Kyiv or any other operational-strategic objective of this war. Defaulting back to Donetsk and Luhansk enables Russia to save face by pretending it was “about Donbas all along” (as already framed by the Russian Ministry of Defense).

III. The campaign for Donbas will decide if and how Russia will continue prosecuting the invasion of Ukraine. If successful and with forces to spare, Moscow will most likely re-escalate its ambitions: capture more territory in the east, resume the Odesa campaign, or return to Kyiv. Southern Ukraine will remain an active front despite the focus on Donbas.

RUSSIAN FORCES RETREAT FROM KYIV AND CHERNIHIV

This gif shows the change in control across Northern Ukraine since March 31st, when Russia withdrew troops. The day before, Sumy was still under a de-facto siege. https://t.co/RofhJKSejT pic.twitter.com/Wm40eZ6uhR

— Nathan Ruser (@Nrg8000) April 3, 2022

NORTHWEST KYIV

1. Echelons of the 29th, 35th, and 36th Combined Arms Armies (CAA) – part of the Eastern Military District (MD) – and the 76th Guards Air Assault Division (West MD) have indeed withdrawn from NEW Kyiv to Belarus between 31 March and 1 April. Ukrainian forces have moved to secure Hostomel (31 March), Borodyanka (31 March), Dymer, Bucha, and Ivankiv (1 April). By withdrawing from Ivankiv, a strategic road junction linking Kyiv to Belarus via the Chernobyl Exclusion Zone (CEZ), the Russian military forfeits its main axis of attack on Ukraine’s capital.

2. Russian forces in NW-Kyiv were in a state of combat ineffectiveness since 15-16 March, and withdrew to escape a likely encirclement by the Ukrainian military. The last major offensive launched by Russian forces in this area took place on March 9. In contrast, Ukraine launched a counteroffensive in the past ten days that cleared the Zhytomyr-Kyiv highway of Russian units, recaptured Irpin (28 March), and pressured Borodoyanka (western flank of the Bucha pocket). The high tempo and effectiveness of Ukrainian maneuver defense, counter-logistics operations, and anti-armor attacks have obliterated Russia’s main axis of attack and denied Moscow the strategic objective of its invasion: seizing Kyiv.

BUCHA MASSACRE

3. Russian forces left behind a massacre in Bucha, videos circulating on social media show. Upon arrival, Ukrainian forces found mass graves, and scores of civilians’ corpses strewn throughout Bucha. Close inspection of footage shows that many of the victims were military-aged males and died of headshot wounds while having their hands and feet tied together – suggesting a likely execution by Russian troops. Women are also among the dead, and many have reportedly been raped – an increasingly widespread practice in Russian-occupied territories. Over 300 civilians are estimated to have been killed in Bucha.

New Srebrenica. The Ukrainian city of Bucha was in the hands of 🇷🇺 animals for several weeks. *Local civillians were being executed arbitrarily*, some with hands tied behind their backs, their bodies scattered in the streets of the city.#RussianWarCrimes pic.twitter.com/outzejdidO

— Defence of Ukraine (@DefenceU) April 2, 2022

NORTHEAST KYIV AND CHERNIHIV

4. Preliminary information indicate that the 41st CAA (Central MD) has mostly withdrawn from Chernihiv province. It is however unclear if all forces have withdrawn as of 4 April. Ukrainian counterattacks have lifted the siege of Chernihiv and re-established the lines of communications (LOCs) to Kyiv, as of 31 March. Clearance operation towards the Belarussian border are underway.

#Ukraine: More vehicles lost by the Russian army during the retreat from #Chernihiv Oblast – a captured 1V14 battery command and forward observer vehicle and a destroyed Ural-based MTO-UB1 maintenance workshop. pic.twitter.com/F0kB6dubcQ

— 🇺🇦 Ukraine Weapons Tracker (@UAWeapons) April 3, 2022

5. Ukrainian gains have also been noted on the H07 segment between Brovary and Nova Basan, an area vacated by the 2nd CAA (Central MD) on 1 April. Elements of the 90th Guards Tank Army (Central MD) have also pulled back from the surrounding area. For reference, Russian forces never had effective territorial control of this AO. Instead, they attempted to secure the main roads towards Kyiv and push forces towards the capital’s eastern flank. Russian LOCs were regularly ambushed by Ukrainian forces, resulting in heavy losses and supply problems for the 2nd CAA.

6. The 1st Guards Tank Army/TGA (Western MD) maintains positions around Sumy, although no significant Russian offensives have been noticed recently. On the contrary, on 27 March, the Ukrainian military splintered the connection between the 1st TGA and the 4th Guards Tank Division (Western MD) operating northwest of Kharkiv. Early signs indicate that some Western MD formations on the Sumy front are also pulling back to Russia.

#Sumy Oblast Governor says Russian troops have been withdrawing from Sumy Oblast. Video reportedly shows a large Russian column leaving the city of Sumy. pic.twitter.com/u5pWUrJAlS

— marqs (@MarQs__) April 4, 2022

@Capellaspace SAR acquired 02APR2022 showed new arrivals to the Dubovyazivka Asphalt plant east of Konotop since 27 March. Approximately 134 pieces of equipment were identified along the east-west road south of the plant. pic.twitter.com/uTPJneHwlW

— Konrad Muzyka – Rochan Consulting (@konrad_muzyka) April 4, 2022

RUSSIA WILL FOCUS ON DONBAS

7. The Eastern and Central MD formations as well as the Air Assault units pulled out of the Kyiv-Chernihiv line and are still operational or can be regenerated will most likely be redeployed to supercharge Russia’s offensive against the Ukrainian Joint Force Operation (JFO) in Donbas. There are also indications that fresh battalion tactical groups (BTGs), which have not participated in the war, will also be committed to the Donbas front. Freshly enlisted conscripts might also be deployed to bolster Russia’s force density in Donbas.

8. With the war entering its second stage, Russian forces will focus on conquering the rest of the Donetsk and Luhansk provinces (Russia currently controls 93% of Luhansk and 54% of Donetsk), as the Russian MoD signaled on 25 March. Downsizing the campaign to focus on Donbas is a logical adjustment following Russia’s failure to take Kyiv or any other operational-strategic objective of this campaign. Defaulting back to Donbas also allows the Russian leadership to save face and pretend it was about “Donetsk and Luhansk” all along, sweeping the disaster in Kyiv-Chernihiv under the rug.

9. Donbas is the only area where Russian forces have managed to sustain a steady, uninterrupted advance in Ukrainian territory since the invasion began. Elements of the 1st Guards Tank Army and 144th Motorized Rifle Division (Western MD) recently captured Izium, a key city in the Donetsk river valley. From Izium, the Russian military could pursue a link-up with the Southern MD units that have captured nearly all of Luhansk province. Together, the two groupings can attempt to envelope Ukrainian positions on two axes: Sievierodonetsk-Lysychansk and Sloviansk-Kramatorks-Horlivka. Support is also expected from the Southern MD units that have stagnated in Zaporizhzhia province.

8/ Kharkiv-Donbas Front. The Russians seek to secure the political objective point of the entire Donetsk & Luhansk Oblast up to their administrative borders. If the Russians can exploit their Izium victory, they may be able to move deep in the rear of UAF positions along the LOC. pic.twitter.com/UXS1fgBWqI

— Jomini of the West (@JominiW) April 2, 2022

10. Mariupol remains the current key effort in Russia’s Donbas campaign. Attacked by Chechen formations, naval infantry from the 58th CAA, and a motorized regiment from the 102nd Motorized Rifle Division (Southern MD), Mariupol will likely fall in the next weeks. Although local resistance has been incredible, the heavy attrition imposed by indiscriminate Russian air and artillery strikes will most likely bring success for the invading force. The fall of Mariupol will complete Russia’s conquest of the Azov coastline.

11. The campaign for Donbas will decide if and how Russia will continue prosecuting the invasion of Ukraine. If successful and with forces to spare, Moscow will most likely re-escalate its ambitions: capture more territory in the east, resume the Odesa campaign, or return to Kyiv. More territory under Russian control will increase President Putin’s leverage over Kyiv. Since Russia failed to seize Kyiv and control the country directly, it must now seek to coerce Ukraine by amputating parts of its and threatening to take more.

SOUTHERN UKRAINE REMAINS A TARGET

12. Southern Ukraine will remain an active front despite Moscow’s newfound focus on Donbas. Russian forces from Crimea have captured nearly 90 percent of Kherson province, including the city, and more than half of Zaporizhzhia province. However, Russian forces failed to cross the Bug river and advance towards Odesa (they were crushed at Voznesensk), and their assault on Mykolaiv was repelled by Ukrainian forces. As of 22 March, the Ukrainians pushed the fight back to Kherson.

13. Russian forces in Kherson and Zaporizhzhia provinces will likely be allocated new objectives supporting or aligning with the Donbas campaign. Their new posture could include securing Kherson, probing attacks on Mykolaiv, or pursuing other goals. A renewed push towards Odesa is unlikely at this point in time. However, we assess the Odesa campaign has been terminated for good but only snoozed. Should the tide swing back on Russia’s side, the Kremlin will likely seek to landlock Ukraine.

by HARM

*cover image: cropped area of the Wikipedia “Russian invasion of Ukraine” map (credits: Viewsridge)

Comments Off

Cold War 2.0 Ex-Soviet

Russia Bombs Maternity Ward & Children’s Hospital in Mariupol As Part of Siege

Incident Response Team

March 10, 2022 8:20 am March 10, 2022

Comments Off

A medical complex in the southern city of Mariupol, Ukraine, has been destroyed in a reported airstrike on 9 March 2022, social media videos show. It is virtually certain that…

A medical complex in the southern city of Mariupol, Ukraine, has been destroyed in a reported airstrike on 9 March 2022, social media videos show. It is virtually certain that Russia has conducted the attack. Russian forces have encircled the city since 1 March, uniting advancing forces from Crimea with those in Donetsk oblast, and enjoy local air superiority. Since the pincer move was completed, Russian troops have resorted to unrestricted, punitive strikes to force the Ukrainian soldiers and population in Mariupol to surrender.

Russia destroyed a childrens and maternity hospital in Mariupol. Casualties are unknown. This is so outrageous and Putin’s war criminals continue to strategically target children, women, elderly pic.twitter.com/we0eoOEKcP

— Olga Lautman 🇺🇦 (@OlgaNYC1211) March 9, 2022

Mariupol. Direct strike of Russian troops at the maternity hospital. People, children are under the wreckage. Atrocity! How much longer will the world be an accomplice ignoring terror? Close the sky right now! Stop the killings! You have power but you seem to be losing humanity. pic.twitter.com/FoaNdbKH5k

— Володимир Зеленський (@ZelenskyyUa) March 9, 2022

THE ATTACK

Eyewitnesses report that the strike was carried out by aircraft. The blast carved a giant crater in the middle of the medical complex, which the New York Times estimates to be 10 feet deep. If the attack was air-launched, Russia likely employed a FAB-series air-dropped bomb, likely FAB 500 (the numbers indicate its mass in kilograms). Russia has already used FAB 500 bombs in Chernihiv, including against residential areas. The possibility of a surface to surface attack also exists, however, one single artillery shell is unlikely to have caused this impact mark. No weapon debris has been documented so far.

Just try and realize this.
Russia today dropped a 1000-kilogram airbomb in downtown Mariupol.
In a location between a hospital and birthing center.
Just because it can. pic.twitter.com/iH4NgvfwXF

— Illia Ponomarenko 🇺🇦 (@IAPonomarenko) March 9, 2022

A regional official told Ukrainian media that 17 people were injured, including staff and patients. No deaths have been reported so far, according to Pavlo Kyrylenko, the head of the Donetsk regional administration, as quoted by Interfax.

FACILITY AND LOCATION

Geolocation confirms that the building complex seen in the footage is indeed a medical facility, appearing as Dytyacha Konsul’tatyvno-DIahnostychna Poliklinika (translates in Children’s Consulting and Diagnostic Polyclinic) on Google Maps, located in Mariupol. As photos and open source information indicate, a maternity ward is also part of the medical complex.

Geolocation of bombed childeren policlinic ‘Dytyacha Konsulʹtatyvno-Diahnostychna Poliklinika’ in Mariupol: 47.096781, 37.533440 – https://t.co/dJGGI9RC4a https://t.co/F5uPS2y326 pic.twitter.com/BEXfxjwox9

— ваят (@bibken) March 9, 2022

It is possible that Russia deliberately targeted this facility as part of its siege tactics. As extensively seen during Russia’s siege operations in Syria, Russian forces purposely target medical facilities to deprive the local population and defenders of healthcare and other key services. Such attacks also serve a psychological purpose: to terrorize the population into submission. Thrown into a humanitarian disaster, an attrited population and defending force are less capable of combat and more likely to surrender.

MARIUPOL UNDER SIEGE

The hospital attack is just one of the many strikes that Russia has conducted on Mariupol on 9 March, as it tries to seize the city. Maxar’s very high-resolution satellite imagery reveals the extent of damage caused by Russian shelling in the past 24 hours. As the photos show, residential homes, apartment complexes, and shopping centers have been badly damaged and destroyed. The deliberate targeting of shopping centers that include hypermarkets and other large grocery stores aims to create a food shortage. This is another siege tactic that the Russian military uses to deteriorate living conditions and force a surrender.

Imagery from Maxar Technologies shows the extent of damage in Mariupol as of 9 March 2022 (compilation by T-Intelligence)

Mariupol was under a limited ceasefire negotiated between Ukraine and Russia on Sunday to allow evacuations. However, Russia has breached the ceasefire by shelling the humanitarian corridors, stalling the evacuation in the process.

Video from a pro-Russia war correspondent showing Russian MLRS launches towards Mariupol. https://t.co/RCTZVQ1EFP pic.twitter.com/K4t0PamMLN

— Rob Lee (@RALee85) March 9, 2022

The collapse of Mariupol will enable Russia to link Crimea with the separatist territories in Donbas by land, which has likely been a Russian aim since the 2014 Donbas offensive. Back in 2014-2015, Mariupol represented the maximum point of advance of the Russian military during the Donbas offensive. Ukrainian forces managed to stop the Russian advance and keep Mariupol.

Russian control of Mariupol will also leave Ukraine without access to the Azov Sea, as Russia has already captured 99% of the coastline.

Comments Off

Cold War 2.0 Ex-Soviet

Ukraine Repels Russia’s Initial Blitz (What’s Next?)

HARM

February 27, 2022 9:57 pm February 27, 2022

Comments Off

Russia has failed to break through Ukrainian defenses in Kiyv and Kharkiv, despite successive airborne and armored assaults backed by artillery, since 24 February 2022. The Ukrainian military has significantly decelerated Russia’s offensive and brought it to a near standstill on most fronts. What Vladimir Putin expected to be a blitz is turning into a slow grind for the Russian military. Ukraine’s defenses prove robust, and the military’s willingness to fight is unshattered.

Military aid from NATO will provide much-needed replenishment for anti-tank, surface-to-air, and air-to-air missiles ahead of a likely beefed-up Russian assault.

Russia will likely also escalate violence, relax the rules of engagement, and increase the use of heavy artillery like thermobaric munition, cluster submunition, and ultimately, ballistic missiles. The objective will be to break the Ukrainian military’s and population’s will to resist.

#UPDATE Map of Ukraine locating areas where explosions, strikes and fighting have been reported and under Russian control.
Updated as of 0900 GMT #AFPgraphics @AFP pic.twitter.com/ks3YdEclst

— AFP News Agency (@AFP) February 27, 2022

FOUR DAYS OF WAR, ONE FAILED BLITZ

1. The past 100 hours have shown that Russia’s campaign has been governed by overconfidence that Russian forces would move fast and seize key objectives, including Kiyv, and a severe underestimation of the Ukrainian military’s ability and will to fight. Moscow’s buoyancy racked up a hefty bill, which includes thousands of Russian soldiers killed in action and loss of military hardware such as aircraft, artillery, and armored vehicles. Grave symptoms of Russia’s misguided optimism are:

INABILITY TO ACCEPT FIERCE UKRAINIAN RESISTANCE

2. Russia’s biggest miscalculation was to doubt Ukraine’s ability and willingness to fight. Russian commanders have likely forecasted an immediate collapse of the Ukrainian military or a chain-surrendering of the units posted on the frontline, similar to Crimea in 2014, facilitating a quick advance on Kiyv. Besieging Kiyv, forcing the Zelensky administration out of office (even through assassination), and installing a pro-Russian government is undoubtedly the main objective of the Russian invasion.

3. Most Russian war plans seem to have been based on the assumption of weak resistance, which led to poor logistical planning, a “restrained” offensive counter-air (OCA), incomplete suppression of enemy air defense (SEAD), the inability to establish complete air superiority, and ultimately, failure to reach key objectives.

FAILURE TO SEIZE KIYV AND MAJOR POPULATION CENTERS

4. Four days into the invasion, Russia has not managed to seize and control any of Ukraine’s major population centers, including Kiyv.

KIYV: Ukrainian forces have heroically repelled multiple Russian charges on Kiyv. The Ukrainians fought off at least three major airborne assaults (two on Hostomel airfield, which was ultimately captured, and one on Vasylkiv airbase) and three to five mechanized and/or motorized operations. Russia’s assaults on Kiyv have exclusively come from the northwest as Russian troops have failed to surround the capital thus far. Ukraine’s victories resulted in tactical defeats and massive casualties for Russia’s tip-of-the-spear units, the special operations forces (SOFs), and airborne assault troopers.

NLAW seen during a firefight. Insane video filmed reportedly on the outskirts of Ivankov. pic.twitter.com/a0mtrFPzhT

— C O U P S U R E (@COUPSURE) February 26, 2022

Ukraine has also managed to hit deep beyond Russian lines, including with a Bayraktar TB2 and anti-tank ambushes.

Байрактари в роботі. Наші оператори ювелірно криють колони ворожих військ. Знищено російський БУК в районі Малина Житомирської області.
Бійтеся, вороги! Не буде вам спокою на нашій землі!https://t.co/P5fCPeWTB8 pic.twitter.com/dH2UEUbKST

— ВОЇНИ УКРАЇНИ🇺🇦 (@ArmedForcesUkr) February 27, 2022

CHERNIHIV: Despite several attempts, Russia did not manage to break through Ukrainian defenses at Chernihiv.

KHARKIV: Despite several attempts to encircle Ukraine’s second latest city, Russian forces have failed to besiege or establish a foothold in Kharkiv. Ukrainian defenses repelled all attacks and resisted multiple artillery strikes from across the border. The 1st Guards Tank Army (Western Military District), Russia’s most capable armored formation, is spearheading the Kharkiv operation.

pic.twitter.com/4lKbU6m3po

— OSINTtechnical (@Osinttechnical) February 27, 2022

The failed “thunder run” towards downtown Kharkiv by Russian light infantry on 27 February showcased a lack of imagination and quick solutions for breaking Ukraine’s local defenses.

KHERSON: Russian forces were unable to fully control and hold Kherson despite a small incursion.

RUSSIA DOES NOT HAVE AIR SUPERIORITY

5. Russia has failed to establish complete air superiority over Ukraine. Multiple social media videos from the past days have shown Ukrainian Su-25 attack aircraft, MiG-29 and Su-27 fighter jets, and Mi-24 utility helicopters engaged in operations against Russian forces. The Ukrainian Armed Forces recently released footage showing three separate strikes on Russian positions using Bayraktar TB-2 combat drones. News that NATO (likely Poland) has resupplied Ukraine with air-to-air missiles indicates that more Ukrainian fighter aircraft survived Russia’s pre-assault Offensive Counter Air (OCA) strike.

Insufficient OCA: While we are still reviewing satellite imagery, our preliminary assessment is that the vast majority of Ukrainian Air Force (UkAF) bases are still operational. As most runways are intact, flight operations can take place.

Craters and impact points are only visible on tarmacs, indicating that Russia’s missile strikes have damaged and disabled some aircraft. The strikes also destroyed fuel and ammunition storage facilities in annex sites.

Satellite imagery courtesy of @planet indicates at least three impacts at Mykolaiv air base #Ukraine 🇺🇦 https://t.co/CupJM0XU1C pic.twitter.com/vC0Dt6OQZN

— Joseph Dempsey (@JosephHDempsey) February 24, 2022

Satellite imagery reveals damage to Chuhuiv air base #Ukraine 🇺🇦 (49.836, 36.645)

📷: @Maxar pic.twitter.com/mWUVlKCw8W

— Joseph Dempsey (@JosephHDempsey) February 24, 2022

Russia likely planned this outcome. As many analysts have pointed out, Russia probably expected to seize the airfields and use them immediately. Instead of destroying the runways, Russia preferred to render the UkAF fighter jets ineffective by leaving them without fuel and ammunition.

Nevertheless, this “restrained” OCA has boomeranged on the advancing forces who continue to face aerial bombardments from Ukrainian attack aircraft, helicopters, and drones.

Unsuccessful Suppression of Air Defenses: Amid continued reports of Ukrainian air defense activity, including the S-300 and Buk-M1, it is highly likely that Russia did not manage to suppress or destroy Ukraine’s defenses completely. These systems are highly mobile. Ukraine probably moved some systems to hideouts to survive “the first day of war.” It is also likely that Ukraine baited Russian missiles with dummy targets, even radar-emission-rich, to improve the survivability of its air defenses.

POOR LOGISTICAL PLANNING

6. Another key symptom of Russia’s overconfidence is the derelict logistical situation of its troops in Ukraine. There are reports that Russian soldiers lack fuel and food and therefore have to source resources locally. This does not come as a surprise, as the Ukrainian military has scored big hits on Russian supply lines, destroying scores of fuel trucks and utility vehicles lagging behind assault troops. In “blitz” offensives, the infantry pushes forward towards the objective, leaving the logistical units behind in a highly vulnerable position. If the logistical support units are destroyed, the assault becomes unsustainable despite significant territorial gains of the advancing force.

One iconic video shows a conversation between the crew of a stranded Russian armored personnel carrier that ran out of fuel and a Ukrainian citizen.

A priceless exchange of a brave Ukrainian citizen with Russian army stuck out of fuel. ENGLISH SUBTITLES.

[Thanks to my Ukrainian friend for transcription and translation] pic.twitter.com/Rar3WRXEwD

— Ali 🇺🇦🕊 (@aliostad) February 26, 2022

Another video shows Russian soldiers looting a convenience store in Kharkiv.

Video: Russian marauders robbing shops in Kharkiv pic.twitter.com/sqan6jgyni

— Liveuamap (@Liveuamap) February 27, 2022

Expecting a “blitz” offensive with a quick victory, Russian commanders possibly ignored the need to ensure a steady stream of supplies.

FRUSTRATION & ESCALATION: WHAT TO WATCH OUT FOR

NORTH-EAST AXIS OF ATTACK COULD SPELL DOOM FOR KIYV

7. A Russian breakthrough on the Chernihiv-Hulkhiv-Sumy frontline could mark the beginning of the end for Kiyv. If these forces are freed up and reach the capital, the Russian military could surround Kiyv. Thus far, the Ukrainian army has managed to keep the Russian advance from southeastern Belarus, Yelnya and Kursk, in check. However, this is an area of operations that require close attention

AVOID CITIES, RACE FOR KIYV

8. There are reports that Russian forces have been ordered to bypass regional cities and race towards Kiyv. A rush for Kiyv would leave the flanks and rear of the Russian columns extremely exposed to Ukrainian attacks, but the pay-off would be huge. A multi-axis convergence on the capital would very likely break the capital’s defenses. The presence of Russian troops beyond cities that they have not captured, such as Chernihiv and Kharkiv, are clear indicators of a rush for Kiyv.

#Ukraine: A Russian convoy consisting of a T-72B3 tank, an Osa-AKM SAM system and logistics trucks were ambushed today in Sribne, #Chernihiv. pic.twitter.com/HZzb8xrohb

— 🇺🇦 Ukraine Weapons Tracker (@UAWeapons) February 27, 2022

COUNTER-LOGISTICS OPERATIONS IN WESTERN UKRAINE

9. Stopping the flow of ATGMs and MANPADs from NATO to Ukraine will become a priority for the Russian military in the coming days. Small teams of Russian Special Operations Forces (SOFs) will likely infiltrate to interdict Ukraine’s supply lines from Poland. They will recon Ukraine’s supply routes and storage and distribution hubs and pass on intelligence for air or artillery strikes. Russian SOFs could also provide terminal guidance for RuAF strikes, especially in the case of precision-guided munitions. It is also possible that Russian SOFs could take matters into their own hands and seek to destroy munition transports.

Renewed Russian missile attacks on Ukraine’s western airfields, or even attempts to shoot down cargo jets are likely also on the table, as a way to disrupt Ukraine’s logistical connection with NATO.

TROOP & VIOLENCE ESCALATION

10. As Russia becomes frustrated with the Ukrainian resistance, it will likely ease rules of engagements (ROE) and phase in more heavy artillery strikes on populated centers. In such a calculus, we would see widespread use of ballistic missiles (BMs), including the Iskander systems, which have been forward-positioned along Ukraine’s borders for weeks. Mounting evidence suggests that Russia has already launched BMs from Belarus, some of them impacting Zhytomyr airfield and Chernihiv.

More Iskander launches recorded from Mozyr https://t.co/QqZMqjZ0Pz pic.twitter.com/oDCCLyq9h3 via @zloy_odessit

— Liveuamap (@Liveuamap) February 27, 2022

Earlier today, a missile strike destroyed the historic cinema building – classified as an architectural monument – in Chernihiv, northeastern #Ukraine pic.twitter.com/g0cmTw6ZxF

— Michael A. Horowitz (@michaelh992) February 27, 2022

11. Russia will likely allocate more forces to the offensive. Currently, only 50 to 70 percent of the troops amassed around Ukraine are engaged in the offensive. As more Russian troops from staging grounds in southern Belarus, Yelnya, Kursk, Voronezh-Belgorod, and Crimea cross the border, Russia will need to rebuild its reserve force. An indicator of this will come in the form of eyewitness videos from Russia showing new troop movements or mobilizations, as we have recently seen with the Chechens. A higher troop count (over 200,000 soldiers) combined with overwhelming artillery and missile strikes is likely Putin’s ultimate bet to break Ukraine’s will to fight.

by HARM

editing by Gecko

Comments Off

Cold War 2.0 Euro-Atlantic

Russia Invades Ukraine: First Day of War Through OSINT

HARM

February 24, 2022 10:27 pm February 24, 2022

Comments Off

In the early hours of 24 February 2022, Russia commenced a series of pre-assault operations to soften Ukrainian defenses ahead of an all-out, multi-axis invasion, which is now in progress….

In the early hours of 24 February 2022, Russia commenced a series of pre-assault operations to soften Ukrainian defenses ahead of an all-out, multi-axis invasion, which is now in progress.

This course of events was extensively threatcasted by the OSINT community weeks in advance, including us. Those familiar with our estimates from January 2022, see here, would have expected a Russian invasion and the subsequent operational and tactical developments.

DAWNBREAKER: PRE-ASSAULT OPERATIONS

Cyber attacks & Electronic Warfare (EW):

1. The opening salvos of Russia’s invasion were cybernetic and electronic and were initiated on 23 February 2022. Russia launched Distributed Denial of Service (DDos) attacks on the Ukrainian government, jammed military communications, and psychological operations against Ukrainian troops.

⚠️ Confirmed: #Ukraine‘s Ministry of Foreign Affairs, Ministry of Defense, Ministry of Internal Affairs, the Security Service of Ukraine and Cabinet of Ministers websites have just been impacted by network disruptions; the incident appears consistent with recent DDOS attacks 📉 pic.twitter.com/EVyy7mzZRr

— NetBlocks (@netblocks) February 23, 2022

2. One notable EW attack was conducted by a Leer-3 which spammed Ukrainian troops with SMS calling them to surrender or be killed.

Ukrainian “soldiers of the 54th Brigade received such text messages. The occupiers are sending them to their phones” – via @OleksandrKolym

The text reads, “Moscow gave a go to the use of RF Armed Forces in the Donbas! There’s still time to save your life and leave the JFO zone” pic.twitter.com/3VHe0oxOfp

— English Lugansk (@loogunda) February 23, 2022

Suppression/Destruction of Enemy Air Defences (S/DEAD)

3. In the dead of night, Russia launched land-attack cruise missiles (LACMs) and anti-radiation missiles (ARMs) at Ukrainian integrated air and missile defenses. They likely disabled several early warning, tracking, and engagement radars, rendering Ukraine’s sensors and SAM systems ineffective (S-300, Buk M-1). However, some might still be functional or serviceable.

Debris is consistent with Kh-31PD anti-radiation variant

Ukrainian radar systems destroyed earlier today, when Russia launched its initial assault. pic.twitter.com/3muRPz35qG

— MrRevinsky (@Kyruer) February 24, 2022

Offensive Counter Air (OCA)

4. Russia launched massive strikes against airbases to ground the Ukrainian Air Force (UkAF). Damaged runways prevent Ukrainian aircraft from taking off and landing. Follow-up salvos disabled the grounded aircraft and cleared facilities for occupation by airborne troops.

Heavy artillery shelling hit Kharkiv tonight. Ukraine. pic.twitter.com/qvA67XiNrD

— Aldin 🇧🇦 (@aldin_ww) February 24, 2022

1 Ukrainian Su-27 warplane has been destroyed today by Russian forces near Zhytomyr. pic.twitter.com/cmtyGsW4uo

— MrRevinsky (@Kyruer) February 24, 2022

5. Visual evidence suggests that Russia fired ballistic missiles, likely Iskanders (SS-26 Stone), at airbases to cause structural damage – a textbook use of BMs for anti-runway operations.

Footage from inside the Ukrainian Kulbakino Air Base as the runway and another position was destroyed by Russian ballistic missiles. pic.twitter.com/1kM7XUoLbl

— CaucasusWarReport (@Caucasuswar) February 24, 2022

6. Latest satellite imagery of Chuhuiv Air Base near Harkhiv shows that Russia did not crater the runways of all airports, instead it destroyed fuel depots and munition storage.

Satellite imagery reveals damage to Chuhuiv air base #Ukraine 🇺🇦 (49.836, 36.645)

📷: @Maxar pic.twitter.com/mWUVlKCw8W

— Joseph Dempsey (@JosephHDempsey) February 24, 2022

7. One Ukrainian Su-27 flew into Romanian airspace where it was intercepted by Romanian F-16s and forced to ground at Bacau Air Base. As per Romanian government accounts, the pilot’s homebase was destroyed and had nowhere else to land.

Counter-C3

8. Russian LACMs also leveled command, control, and communication nodes (C3). These attacks aimed to separate the higher echelons from battlefield units, behead the leadership, and throw the military in disarray. This was another textbook pre-invasion tactic.

Counter-Logistics

9. Many videos emerged online showing LACMs pounding ammunition depots and warehouses, resulting in massive secondary explosions. Attacks to bleed Ukraine’s logistical supply lines have occurred nationwide, including Lviv (near Poland), Ivano-Frankivsk (close to Romania), Melitopol, and Odesa.

Missile strike reportedly on a warehouse in Odessa. https://t.co/FbnFWYWPWV pic.twitter.com/xJYbUcJ2Fo

— Rob Lee (@RALee85) February 24, 2022

Wow. Video of a missile hitting an airport, reportedly in Ivano-Frankivsk in Western Ukraine. The geographic scale of this thing is crazy pic.twitter.com/odhvqin77Y

— Alec Luhn (@ASLuhn) February 24, 2022

10. Our previous T-Intelligence analysis anticipated this tactic to diminish Ukraine’s growing ATGM stockpile.

MIDDAY RUMBLE

11. Shortly after the crack of dawn, the Russia commenced a multi-axis ground offensive, moving tanks and armored vehicles along select axis of attack.

Russian operational directions and screengrabs from select videos showing military attacks in Ukraine

Air superiority

12. As OCA was largely successful and grounded most of the UkAF’s extensive fighter fleet, the Russian Aerospace Forces (RuAF) could establish air superiority. Otherwise, we would not have seen a major helicopter assault on Kiyv and nearby airports. However, a video emerged showing a UkAF MiG-29 buzzing the skies of Kiyv and allegedly dogfighting an alleged Russian Su-35, which means that not all fighters are grounded or destroyed (update: a re-examination of the video concludes that both aircraft are Ukrainian).

#Ukraine 🇺🇦: somewhere near #Kyiv a Ukrainian MiG-29 (low-flying) is taking on a Russian Su-35. pic.twitter.com/qpdJo12uzV

— Thomas van Linge (@ThomasVLinge) February 24, 2022

Manoeuvre

13. Russian battalion tactical groups (BTGs) have advanced from nearly all operational directions:

Belarus (to Kiyv, the Pripyat area, Chernihiv)

14. Russian forces in Belarus crossed the border towards Chernihiv, seized the Chernobyl exclusion zone following a heavy armored battle with Ukrainian forces, and deployed a massive airborne assault on Kiyv.

Convoy of MT-LB’s, fire control vehicle and TOS-1 flamethrower MLRS, plus other vehicles reportedly at the Senkovka-Veselovka border crossing with Belarus pic.twitter.com/MqseHsP5LQ

— ELINT News (@ELINTNews) February 24, 2022

Voronezh (to Kharkiv and Sumy)

15. Under the cover of rocket artillery, tank columns crossed into Ukraine and rapidly approached the country’s second-largest city, Kharkiv. The battle for Kharkiv is still raging on, with Russia facing losses. Intrusions have reportedly also occurred further north on the frontier near Sumy.

Белгород pic.twitter.com/G34hbyjV5h

— IgorGirkin (@GirkinGirkin) February 24, 2022

Russian military column in Volchansk, Kharkiv with Msta-B howitzers, MT-LB, BMP-2, TOS-1A thermobaric MLRS, T-72B3, Tigr-M vehicles, etc. https://t.co/DFCJRQuy4F pic.twitter.com/pI4w2PDqsQ

— Rob Lee (@RALee85) February 24, 2022

The aerodrome in Kharkiv Ukraine says was hit by a Russian missile after Putin announced the special military operation in Ukraine pic.twitter.com/ZDX5P9g3Yu

— Alec Luhn (@ASLuhn) February 24, 2022

Don (further into Donbas)

16. Recently reinforced by Russian troops, Luhansk and Donetsk separatists have launched a tandem assault across the demilitarized zone. Operational objectives are to capture Kramatorsk and Severodonetsk, and secure the rest of Donetsk and Luhansk regions. Splinter groups will likely then follow up to hit Ukrainian positions in Kharkiv from the rear, and separately, besiege Mariupol.

Crimea (to Kherson & Melitopol)

17. Russia made significant territorial gains north of Crimea, towards Kherson city and most adjacent areas. A separate line of the assault went eastwards and arrived at Melitopol. Beyond Melitopol, Russian forces aim to encircle Mariupol with Donbas formations.

#Breaking #NewsMap
The Ukrainian front in Kherson totally collapsed.
Russian troops reached the Dnepr and do not face any resistance.
I geolocated them 130 km inside Ukraine.
The Ukrainian army says the situation is “difficult”. Understatement of the year.
This is unbelievable. pic.twitter.com/0yExuFmjXA

— Julian Röpcke🇺🇦 (@JulianRoepcke) February 24, 2022

Our team will be tweeting the geolocations of as many videos and images as we can identify today. #OSINTatMIIS This is 46.680773° 32.572649° #Ukraine https://t.co/Gbu7evgvod

— Tricia White (@triciawh1te) February 24, 2022

*Black Sea Fleet

18. An amphibious assault on Odesa is still expected but would likely come later to complete the pincer movement with troops advancing from Kherson.

Close Air Support (CAS)

19. Ka-52 attack helicopters, Su-25 attack aircraft, and a myriad of ground-based artillery provide overwhelming fires to the advancing columns. Russia’s successful OCA and subsequent air superiority enabled aerial CAS platforms. Without a permissive aerial environment, Su-25s and attack helicopters would have been easy targets for Ukrainian fighter jets.

Russian Su-25 attack aircraft in Hostomel. https://t.co/aWOlMO0uNV pic.twitter.com/8zfdNzHvVw

— Rob Lee (@RALee85) February 24, 2022

Airborne assault

20. Russian Airborne Forces aboard Mii-8 helicopters and escorted by attack helicopters have assaulted key areas around Kiyv. Russian paratroopers achieved a breakthrough at Hostomel airfield/Antonov International Airport, but lost three helicopters to ground to air fire in the process. Russia’s airborne assault seemed rushed, albeit speed is key to maintaining the initiative, and faced heavy resistance.

Securing these facilities is key to airlift tanks, personnel, and the necessary equipment to besiege Kiyv.

Huge Russian Air Assault ongoing just north of Kyiv pic.twitter.com/nFPUFmytR4

— C O U P S U R E (@COUPSURE) February 24, 2022

Confirmed by Ukrainian authorities. A large air assault operation with Mi-8 helicopters on Antonov International Airport in Hostomel. Interior Ministry says Russia has seized control. Very dangerous; it’s just 15 minutes west of the capital ring road. pic.twitter.com/JhlyVktVRC

— Christopher Miller (@ChristopherJM) February 24, 2022

#Russian Ka-52 appears to have made an emergency landing after being shot pic.twitter.com/NRFQ21NQML

— Michael A. Horowitz (@michaelh992) February 24, 2022

NIGHTFALL: OFFENSIVE OPERATIONS CONTINUE

Tactical defeat

21. Russian airborne units have lost Hostomel airfield after a strong counterattack from the Ukrainian military. If sustainable, the loss of Hostomel is a significant blow to Russia’s plans to quickly amass and encircle Kiyv before Ukrainian forces establish better defenses.

EPILOGUE

For reasons of operation security, we will not comment on Ukraine’s military movements. We urge OSINT analysts not to share videos or images of the Ukrainian Armed Forces.

by HARM

Comments Off

Cold War 2.0 Ex-Soviet

Mother of All Bear Scares: Russia Amasses Forces for a Multi-Axis Attack on Ukraine

HARM

January 23, 2022 5:01 pm January 23, 2022

Comments Off

KEY JUDGEMENTS I. The Russian military build-up around Ukraine is designed for combat operations and not a show of force (“bear scare”). Our estimates are based on the unprecedented scale…

KEY JUDGEMENTS

I. The Russian military build-up around Ukraine is designed for combat operations and not a show of force (“bear scare”). Our estimates are based on the unprecedented scale of Russia’s military build-up, the force composition in terms of capabilities, credible logistics, and increased operations security.

II. President Putin’s intentions remain unclear, but a military operation against Ukraine is moderately likely. The hypothetical campaign will likely be punitive, target Kyiv or Kharkiv, and seek to install or facilitate the emergence of a Russian-friendly “salvation” government.

III. Moscow’s diplomatic campaign around the build-up serves the informational offensive against NATO. Russia does not seek a political settlement to the current tensions and is well aware that its maximalist demands are non-starters for the West. However, these political talking points serve to shift the blame for the current tensions on the so-called “NATO expansion.”

IV. Only the threat of massive economic sanctions can alter Russia’s war plans. Ironically, NATO’s most unreliable member, Germany, holds the biggest financial leverage against Russia. Ukraine’s growing stockpile of ATGMs will be critical to slow down an armored assault and impose costs on an aggressor but have no strategic value.

READY FOR COMBAT

UNPRECEDENTED BUILD-UP

1. Russia has amassed around 100,000 troops, organized in 50 to 60 Battalion Tactical Groups (BTGs*), in five areas bordering Ukraine. The mobilized force represents roughly 30% of Russia’s 168 BTGs. This is the largest Russian build-up in modern history, far exceeding the number of BTGs deployed to annex Crimea (approx. four) and subsequent offensives in Donbas (five to eight).

A substantial part of the BTGs deployed around Ukraine consist of equipment without personnel. However, Russian General Staff can deploy forces to man the equipment at a moment’s notice, especially using airlift capabilities (as recently demonstrated in Kazakhstan). In addition, a large portion of the troops has been permanently based near the Ukrainian border since 2021 or earlier.

*BTGs are temporary operational formations of infantry battalions and attached artillery, air defense, engineering, and logistics support units for combat operations, as part of motor rifle and tank brigades. Air assault units, special operations forces, and other echelons can also be attached to a BTG.

*Estimates on BTG posture: Ukrainian military intelligence estimates of 40 BTGs from late-November 2021 serve as a baseline layer (now dated and exceeded), followed by personal approximations in January, and most importantly, taking into account more precise calculations from Rochan Consulting (54 on 17 January 2022) and Michael Kofman, director of Russia Studies at CNA (55-60 on 15 January 2022).

Overview of Russian military build around Ukraine. Note that the map is slightly outdated and does not show the units recently amassed in southern Belarus. (source: New York Times)

2. Four out of five Russian military districts have provided units for the build-up, including four field armies from the Eastern Military District (EMD), which are heading towards Belarus for the first time. The level and scope of cross-theater deployments are out of the ordinary and represent a significant logistical strain on the Russian military.

3. Russia’s build-up continues to escalate in scope and complexity. Ongoing troop movements to reinforce established positions, deployments of advanced weapons capabilities like Iskander short-range ballistic missiles (SRBM), and opening a new front in southern Belarus underscores the continuity of the operation. US intelligence estimates that the Russian build-up will ultimately amount to 175,000 troops/100 BTGs.

LOGISTICAL PREPARATIONS

4. The flow of logistical units and equipment to Ukraine’s border is the clearest indicator of a build-up with the intention of combat, apart from the unprecedented manpower involved. Eyewitness footage on social media has documented the westward movement of Russian fuel tankers, bridging/pontoon equipment, recovery trucks, transloaders, and other utility vehicles on railcars from late October to mid-December 2021.

5. Logistical movements have re-intensified between January 15-20, 2022, despite a slowdown in the previous month. Railcars now mostly service routes from Siberia, delivering EMD hardware and personnel, to southern Belarus. These transports can be subject to delays caused by bad weather, mechanical issues, or other obstacles that arise on long-term deployments.

6. Russia’s logistical capacity around Ukraine is difficult to estimate at this point. The most recent authoritative estimate comes from a U.S. government source (quoted by CNN on 3 December 2021): “current levels of equipment stationed in the area could supply frontline forces for seven to 10 days and other support units for as long as a month.” Russia’s current logistical capacity is now likely more extensive than in December.

⭕️🇷🇺#Russia|n railways on Jan 15 2022. 👉Transportation of logistics vehicles. pic.twitter.com/8H9usMk0tY

— 🅻-🆃🅴🅰🅼 (@L_Team10) January 15, 2022

Logistics trains like this is something you don’t see with normal exercises.#Russia https://t.co/d5dTTIedXL

— Petri Mäkelä (@pmakela1) January 17, 2022

Major logistics, supply and fuel train moving through Tyumen, Russia, posted on TikTok 9 hours ago pic.twitter.com/eqkjdEoJxN

— ELINT News (@ELINTNews) January 21, 2022

7. Russia’s logistical build-up is likely incomplete and will certainly continue at least until February 10-20, when joint exercises will take place in Belarus. With no “Z-Day” in sight, troop movements and supplies will probably continue beyond February – if not to boost to sustain the Russian military capacity. A CITEAM social media analysis found that most soldiers are expected to be deployed for two to seven or even nine months.

While unnecessary for a show of force, logistics are a prerequisite for military operations. Tanks cannot move without fuel from tankers; soldiers cannot receive food and ammunition without utility trucks supplying the frontline; combat injuries must be treated in field hospitals.

EFFORTS TO CONCEAL

8. Unlike during previous “bear scares,” Russia has made significant efforts to conceal the troop movements and boost operations security (OPSEC). Countermeasures include nighttime movements, blacking out unit markings, covering equipment, disrupting online tracking methods (such as railcar databases), and dispersing staging areas in smaller formations. This behavior starkly contrasts the build-up in March and April 2021, when the Russian posturing was overt and demonstrative.

FIVE OPERATIONAL DIRECTIONS (OD)

9. Russia has positioned its forces along five axes of attacks, or operational directions (OD)*, around Ukraine: Belarus, Yelnya, Orlov-Voronezh, Don, and Crimea. The following is a short account** of Russian troop dispositions in the five ODs, their relevance, and possible objectives.

Map shows the Ukraine military intelligence assessment of possible Russian attacks paths (source: Ukrainian military/Military Times)

*axis of attack launched from a given staging area, as seen in a Ukrainian Military Intelligence map released in a Military Times interview November 2021.

**For an extensive and detailed overview of the Russian order of battle in these areas, please refer to Rochan Consulting’s Tracker, from which most of this data is drawn.

BELARUS OD

a. The latest and most important piece of the jigsaw puzzle assembled around Ukraine. OD Belarus brings Kiyv within striking distance of Iskander-M SRBMs. Due to its proximity to the capital (150-200 km), OD Belarus can serve as a springboard for an offensive on Kiyv.

Russian Iskander missile systems in Asipovichy, Belarus. pic.twitter.com/c2t2RGPgfI

— Benjamin (@hengenahm) January 21, 2022

b. Currently, there are seven to ten BTGs in Belarus, mainly from the EMD, according to Rochan Consulting. Russian infantry and mechanized units have been documented arriving in large numbers in Mazyr, Recyca, Gomel, Yelsk (18 km from UKR border), and the surroundings.

Russian troops have officially arrived in the Belarusian town of Yelsk, 18km from Ukraine. A local news outlet made a short story about it. pic.twitter.com/ZdprX1a8Th

— Tadeusz Giczan (@TadeuszGiczan) January 20, 2022

c. Troop movements towards Belarus began sometime in early January and are escalating. A Su-35 squadron has left its homebase inKomsomolsk-on-Amur (near the Sea of Japan), and will soon touch down in Belarus. Two S-400 surface-to-air missile (SAM) systems will follow shortly. Iskander SRBMs are also reportedly joining the party.

YELNIA OD

a. The forces headquartered and amassed around Yelnya could support OD Belarus and OD Orlov-Voronezh with reinforcements or open a new axis of attack to stretch UKR forces thin in the north. Around four to eight BTGs are based in OD Yelnya, with many units assuming positions close to the tri-border with Belarus and Ukraine at Klintsy. With the influx of an Iskander battalion (approx. 24 missiles) from the 119th Missile Brigade, and various multiple rocket launcher systems (MRLS), OD Yelnya also packs firepower with range to strike Kiyv.

Russian military presence at a staging ground near Yelnya. Image captured on 19 January 2022 by Maxar Technologies.

ORLOV-VORONEZH OD

b. Established during the initial build-up in March and April 2021, these forces pose a direct threat to Ukraine’s second-largest city, Kharkiv, and the adjacent areas. There are likely at least twelve BTGs concentrated between Orlov and Voronezh, and these forces have been kept at high readiness through drills simulating nighttime assault and artillery support.

Pogonovo training ground. Imagery captured on 16 January 2022 by Maxar Technologies

c. Pogonovo and Krynitsa training grounds are the epicenters of the manpower concentration in this OD. Since last year’s “bear scare,” Pogonovo has been exceptionally well documented via satellite imagery (see our analysis) and remains an area of primary concern (see Rochan Consulting’s GEOINT analysis). The forces and equipment at the two staging grounds augment the formidable 20th Combined Arms Army (CAA) headquartered in Voronezh.

d. In the past weeks, units in this OD have inched increasingly closer to Ukraine’s border. Satellite imagery from December 2021 shows an increase in military hardware in Valyuki/Soloti, just 15 km from the Ukrainian border. Similar activities have been noted in Baguchar (80 km), amounting to a worrying trend.

Satellite imagery from the 9th of December showing a large collection of RU Military Hardware near #Valuyki: just 15 km from the border with Ukraine. https://t.co/2MlgppdGIC pic.twitter.com/PgkEmgIsjp

— The Intel Crab (@IntelCrab) December 18, 2021

DON OD

a. Over 15 BTGs inhabit the areas between Rostov-on-Don and Ndvocherkassk. Their potential role will be to rendezvous with Russian forces stationed in eastern Ukraine to strengthen local defenses or help mount an offensive in depth. Hypothetical offensive operations will likely seek a breakthrough in Mariupol followed by a march along the Azov coastline. Don OD could also eye the Dnieper river valley, especially in a joint operation with splinter formations from Orlov-Voronezh OD.

CRIMEAN OD

a. This OD could open no less than three axes of attacks on Ukraine’s coastline. An amphibious assault launched from Crimea’s western coast would target Odessa and the adjacent littoral. Once ashore, these forces could link up with the Operational Group of Russian Forces (OGRF) from the Transdnister breakaway republic coming from the west. The lower section of the Dnieper valley (North Crimean canal) is another realistic, although overstated, target. Together with Don OD, Crimea-based forces would likely also attempt a pincer movement on the Melitopol-Mariupol axis.

b. Russia has simulated almost all of these attack scenarios during the military build-up in March and April 2021, during which new BTGs assumed permanent stations in Crimea, bringing the total count to at least 12 BTGs. Back then, the main event was a major amphibious assault on the Opuk training range, which we documented in this analysis. Air and infantry assaults around Dzankhoi and other areas in northern Crimea were also noteworthy.

c. Naval movements are also underway, with a task force comprising of Baltic Fleet and North Fleet vessels (including three Ropucha-class landing ships) heading towards the Mediterranean Sea to link up with Pacific Fleet ships for joint exercises. There are fears that at least a part of the maritime task force will enter the Black Sea.

Russia deployed the largest naval and amphibious grouping to the Black Sea in April since the fall of the Soviet Union with 4 large landing ships from the Northern and Baltic Fleets. It appears they’re about to deploy even more this time. 675/https://t.co/9KTnPQJDoo

— Rob Lee (@RALee85) January 20, 2022

INTENTIONS & AIMS

10. Russia’s intentions remain unclear, but we judge the likelihood of direct action high with a 55 to 60% confidence level. Our estimates are based on the build-up’s unprecedented scope and credible composition, including the multi-axis posturing and the unachievable, maximalist political demands of Russian diplomacy.

11. It is unknown how the hypothetical military operation will look. While the Russian military is positioned for a multi-axis assault, it will not necessarily follow the apparent blueprint. Russia might seek to activate only one OD, such as Belarus or Voronezh, a combination of them, or all. Attacks could be simultaneous or gradual and will fluctuate based on the situation on the ground.

12. The hypothetical campaign will likely be punitive, target Kyiv or Kharkiv, and seek to install or facilitate the emergence of a Russian-friendly “salvation” government. Such an operation would be akin to the 2008 Georgian campaign, where Russia did not seek to annex territory but to force the government into submission. Rob Lee put forward a similar hypothesis in an extensive article here.

13. There is also a high possibility (40 to 45%) that no military operation will occur, yet heightened tensions will persist. The build-up could proceed and even escalate, but hold out for months. As a result, more units will permanently or semi-permanently entrench near Ukraine, waiting to achieve strategic surprise later. The payoff could come even seven months into the future. Alternatively, a significant amount of forces could pack up and return to their home base at any given moment.

14. Russian President Vladimir Putin will make the final decision. While “Kremlinologists” have long tried to interpret the thoughts of Kremlin leadership, nobody knows Putin’s calculus. He has likely committed to one or several courses of action, hence the comprehensive preparation, but the final order has not been signed and issued.

RUSSIAN MOTIVATIONS

FEARS OF IMPENDING UKRAINIAN OFFENSIVES IN DONBAS

15. The key driver of this build-up is the perceived threat of a Ukrainian offensive to recapture Donetsk and Luhansk and the increased anti-Russian narratives of the Zelensky administration. Past events (see below) might have forced Russia to consider that the current democratic order will not generate a pro-Russian government in Kiyv. Recapturing Donbas and pursuing NATO membership will remain a top priority of all upcoming cabinets.

a. THE DRONE STRIKE: On 26 October 2021, a Ukrainian Bayraktar TB-2 drone bombed a Russian artillery position in Luhansk. The artillery system had passed the withdrawal line of the Minsk agreement and shelled Ukrainian positions. This was the first Ukrainian airstrike on a Russian position and arguably Kiyv’s most hawkish action in years. Russia reacted by resuming and escalating the build-up of March to April 2021, leading to what we see today.

b. THE PERCEIVED UKRAINIAN BUILD UP: Between late 2020 and early 2021, a string of videos online apparently showed Ukrainian tanks on railcars rushing towards eastern Ukraine. Whether this was a build-up or just a rotation of the forces stationed near the frontline remains unclear. However, Russia decried the troop movements as preparation for an offensive in Donbas. In retaliation, Russia escalated the conflict in Donbas and initiated the build-up of March and April 2021.

c. ZELENSKY TURNS HAWKISH: Ukrainian President Zelensky initially adopted a de-escalatory agenda regarding Donbas and pursued peace talks with Russia. By 2020, it became apparent that Russia had no interest in entering negotiations with Ukraine until non-starter demands, such as Ukraine renouncing NATO membership and sovereignty over Donbas, were met. As Zelensky’s dovish strategy failed to bear fruit, his public approval started plummeting. As a result, he adopted a more hawkish demeanour, taking action against Russian-backed opposition, seeking to re-energize ties with NATO, and invigorating Ukrainian aspirations in Donbas. Russia took note of the change of tone and started viewing Zelensky as a problem.

SECONDARY CONSIDERATIONS

16. Modernization and growing capabilities of the Ukrainian Armed Forces render Kyiv an increasingly potent adversary. Tactical assets like the Bayraktar drones and Javelin anti-tank guided missiles (ATGMs) cannot generate strategic advantages, but ballistic missiles and cruise missiles can – if stockpiled in high enough numbers. Ukraine is currently developing the Hrim SRBM (with covert funding from Saudi Arabia) and Neptune anti-ship cruise missiles. These two assets can pose a credible threat to Russian critical infrastructure, command and control centers, and population centers, raising the cost of aggression for Moscow. Other programs such as unit reform or NATO training and standardization will also improve Ukrainian combat effectiveness.

17. NATO Reconnaissance sorties over Ukraine keeping a watchful eye on nefarious Russian activity. Russian officials have publicly decried the constant sorties of NATO reconnaissance aircraft tracking their movements in Donbas and the Black Sea. American Global Hawk drones, P-8A Poseidons, various RC-135s and various other ISR aircraft patrol the region daily and could provide early warning of a Russian invasion and expose the movements.

Earlier today, ten ISR aircraft from multiple NATO members flew over the Baltics and Ukraine:
USN P-8A (PK18x)
US Army RC-12Xs (YANK01 & YANK03)
USAF RC-135W (JAKE11)
USAF E-8C (REDEYE6)
RAF P-8A (GURNY01)
RAF RC-135W (RRR7205)
Swedish S100D (SVF604)
Swedish S102B (SVF623)
1/5 pic.twitter.com/bvRF4D7MXs

— Amelia (@ameliairheart) January 18, 2022

18. Growing defense ties between Ukraine and individual NATO members. Similarly, Russia is unhappy with the maturing defense ties between Ukraine and various NATO members, especially the United Kingdom. Ukraine and the United Kingdom have signed a defense agreement in mid-2021, which was followed by a significant incident at sea involving the HMS Defender and a Russian naval task force (see our analysis on the topic). While Ukrainian NATO membership remains impossible at this point, Russia is taking note that individual NATO members are coming to Kiyv’s aid.

DIPLOMACY: THE INFORMATIONAL COMPONENT

19. Moscow’s diplomatic campaign around the build-up serves the informational offensive against NATO. Leveraging nonmilitary means, namely political and information warfare, is a tenet of the Russian General Staff’s approach to “new generation warfare.” Russia’s official demands include guarantees that Ukraine will never join NATO, the withdrawal of NATO troops from Romania and Bulgaria, the decommissioning of the Ballistic Missile Defense system in Deveselu (Romania), and others. Russia does not seek a political settlement to the current tensions and is well aware that its maximalist demands are non-starters for the West. However, these political talking points serve to shift the blame for the current tensions on the so-called “NATO expansion.”

20. Western interactions with Russia’s false demands played into the Kremlin’s hands. Imprisoned opposition leader Alexey Navalny has perhaps captured the situation best in a TIME interview: “Instead of ignoring this nonsense, the U.S. accepts Putin’s agenda and runs to organize some meetings. Just like a frightened schoolboy who’s been bullied by an upperclassman.” Western diplomats should have rejected this rhetoric and brought the conversation back to the reality on the ground – the 100,000 Russian troops positioned to swallow Ukraine.

MEASURES TO DISCOURAGE ATTACKS & PALLIATIVES FOR THE DAY AFTER

21. Only the threat of massive economic sanctions can alter Russia’s war plans. Ironically, NATO’s most unreliable member, Germany, holds the biggest financial leverage against Russia. Nothing would deter a Russian invasion more than a credible threat from Berlin to terminate the North Stream 2 project. Perhaps equally important would be a concerted effort to disconnect Russia from the SWIFT payment system. American and EU targeted sanctions on Russian oligarchs will not affect military plans.

22. Wholesale transfers of tactical military equipment to the Ukrainian Armed Forces are necessary palliatives but do not deter a Russian invasion. Ukraine received over 1,000 NLAW ATGMs from the United Kingdom in the past few days. The British NLAWs will significantly boost Ukraine’s ATGM inventory, consisting of around 400 Javelins received from the United States, first under Trump (2017; 2018), then Biden (2020; 2021). Estonia will also deliver an unknown number of Javelins while Latvia and and Lithuania will donated Stinger man-portable surface-to-air missile systems (MANPADs) to Ukraine, in the next days.

🇬🇧 передала #ЗСУ легкі протитанкові засоби
Це зміцнюватиме 🛡 спроможності України, а надані засоби будуть використані виключно з оборонною метою pic.twitter.com/ipGpqPfInG

— Defence of Ukraine (@DefenceU) January 18, 2022

Ukraine’s growing stockpile of ATGMs will be critical to slow down an armored assault and impose costs on an aggressor but have no strategic value. Russia has likely already devised tactics to mitigate the ATGM threat using long-range fires, drone-directed artillery, and airstrikes, drawing from lessons learned in Syria. Alternatively, sabotage behind enemy lines is another course of action that Russia could take – and has likely already taken – to compromise ammunition depots.

NATO states should continue delivering military aid to Ukraine. The care packages should consist exclusively of easy-to-use equipment which can be quickly absorbed by the Ukrainian military and not require extensive training or high maintenance.

by HARM

editing by Gecko

This assessment was made using Open-Source Intelligence (OSINT) techniques and resources. Visit Knowmad OSINT to learn more about our online OSINT training.

Comments Off

News

T-Intell’s OSINT Training Marks One Year Anniversary

Incident Response Team

November 18, 2021 7:49 am November 18, 2021

Comments Off

On 15 November 2021, T-Intelligence’s sister branch and training service, Knowmad OSINT, marked one year since its inception. Around 100 people went through the Knowmad OSINT training to acquire or enhance their OSINT skills during the past year. Students, career starters, seasoned professionals, and hobbyists took up our course. Various Individuals, private companies, and government-sector agencies entrusted us with OSINT training, including one of the world’s leading postgraduate programs in Security, Intelligence, and Strategic Studies.

When planning started for the course, seeing the increased interest on the civilian job market for OSINT skills, we based our training design on three main pillars:

OSINT for all: we wanted our course to be accessible to beginners and bring value to established professionals. In addition, our content and lessons would be exclusively based on openly and freely available resources so that participants do not stumble across paywalls or other barriers.
INT back into OSINT: First and foremost, OSINT is an intelligence practice at its core. Our training underscores this aspect and takes an interdisciplinary and analytical approach to OSINT.
More than just an INT: While honouring OSINT’s original mission in national security and defense, we choose to take an innovative approach to the field. We wanted our course to embody Mark Lowenthal’s idea from the late 1990s, namely that OSINT is slowly becoming a facet of the other collection disciplines. As a result, our course covers the open-source applications of IMINT, GEOINT, SIGINT, and HUMINT/SOCMINT.

We’re happy to report that our training helped people break into the intelligence field, climb the job ladder or find their calling as early career-starters. We want to thank everyone, not only our Knowmads but also our T-Intelligence readers, for tuning in for our periodical articles and engaging with us on social media. It’s been a blast!

Moving forward into Year Two, Knowmad OSINT will continue to grow and proliferate OSINT expertise to both the public and clandestine communities. T-Intelligence will continue to provide the OSINT action it has done for the past five years.

If you or your organization is interested in developing OSINT skills, send us a message!

The T-Intelligence & Knowmad OSINT team

Comments Off

Target Transnistria: Russia’s Maskirovka and Pathways to Escalation (Threatcast)

Russian Mass-Casualty Attack on Civilians at Kramatorsk Train Station

Defeated in Kyiv, Russia Downsizes War Aims to Donbas and Southern Ukraine

Russia Invades Ukraine: First Day of War Through OSINT

No Time To Dispute: Russia’s A2/AD in the South Kurils

Putin’s Mercenaries on Tour: Mapping the Wagner Group’s Global Activities

"Do Not Enter:" Using OSINT to Monitor Russia's Wargames in the Black Sea

Echoes of the Cold War: Why "Bears" Like the G.I.U.K. Gap

Iran Tests Carrier-Killing Missile, Suicide Drones (and Other Insights from Exercise “Great Prophet 15”)

What We Know About the Secret Israeli-Saudi Meeting in Neom

Operation Cigarette Butt: Ukraine’s Covert Strike on Saki Air Base

Flashpoint Snake Island: Why Russia Wanted the “Rock” in the Black Sea

Target Transnistria: Russia’s Maskirovka and Pathways to Escalation (Threatcast)

Russian Mass-Casualty Attack on Civilians at Kramatorsk Train Station

Defeated in Kyiv, Russia Downsizes War Aims to Donbas and Southern Ukraine

Russia Bombs Maternity Ward & Children’s Hospital in Mariupol As Part of Siege

Ukraine Repels Russia’s Initial Blitz (What’s Next?)

Russia Invades Ukraine: First Day of War Through OSINT

Mother of All Bear Scares: Russia Amasses Forces for a Multi-Axis Attack on Ukraine

READY FOR COMBAT

INTENTIONS & AIMS

RUSSIAN MOTIVATIONS

DIPLOMACY: THE INFORMATIONAL COMPONENT

MEASURES TO DISCOURAGE ATTACKS & PALLIATIVES FOR THE DAY AFTER

T-Intell’s OSINT Training Marks One Year Anniversary