The following analysis is an updated and revised version of our preliminary-battle damage assessment (P-BDA) released after very-high-resolution (VHR) satellite imagery of Saki Air Base surfaced online, on August 10….
The following analysis is an updated and revised version of our preliminary-battle damage assessment (P-BDA) released after very-high-resolution (VHR) satellite imagery of Saki Air Base surfaced online, on August 10. We assess that the explosions at Saki AB resulted from a Ukrainian attack and not a “work accident,” as described by Russian authorities.
P-BDA “hot take”
Open-source GEOINT hot take on the aftermath of Saki Air Base, using @planet imagery from @trbrtc. Analysis is preliminary/ not definitive. BMs likely behind the strike due to craters, blast radius, and extent of damage. #Hrims remain top candidates (HE + fragment warheads) pic.twitter.com/80dD2tcl8M
BDA V2 Saki AB attack (source: T-Intelligence using Planet imagery, all rights reserved)
GEOINT SHOWS MASSIVE MATERIAL DAMAGE
Ukraine’s unclaimed attack on Saki AB left the Russian Navy’s 43rd Independent Naval Attack Aviation Regiment without at total of at least 11 aircraft, an unknown number of personnel, and an unquantifiable amount of auxiliary equipment and logistics. Our Battle Damage Assessment covers the parking area and main apron.
At least ten aircraft were destroyed, disabled or severely damaged: six Su-24M/MRs (NATO/AFIC: Fencer) and four 30SMs (Flanker-H).
Two buildings collapsed;
an unquantifiable amount of auxiliary material and other logistics was destroyed. The August 9 image shows hundreds of crates holding unknown contents (probable munition, fuel, spare parts, etc.) are stockpiled near the aircraft in the parking area. The largest stockpiles are in front of the two service buildings and on the cement pads usually used for parking aircraft. These areas appeared cratered in the post-blast image, likely the scene of the major explosions filmed by holidaymakers.
Burn marks are visible on the westernmost parking slot, but no aircraft wreckage is visible on the August 10 imagery. However, at least one Su-24 was destroyed on the apron as per a social media video. The Russians could have removed the damaged aircraft or whatever was left of them before the satellite passed overhead.
Compared to the P-BDA, V2 contains the before-explosion imagery (August 9), improves the visual communication of the initial analysis, adds more context to the cratered areas, re-labels a largely nondescript aircraft wreckage as a Su-30SM (previously mislabeled Su-24), and re-assesses the main apron damage (no aircraft wreckage visible on August 10). BDA V2 also highlights a damaged administrative building that was not marked in the P-BDA. Other noteworthy BDAs can be found here, here, and here, among others.
MODUS OPERANDI TO REMAIN UNKNOWN
At the time of the writing of this report, there is still no definitive proof as to what weapon system carried out the attack. There is no hard evidence to break the tie between a missile strike and a SOF operation (both raid and stand-in strike).
In our “hot take” we assessed that short-range ballistic missiles (SRBMs) are most likely behind the strike, with the indigenous Hrim as the probable culprit. Other theoretical, albeit less likely, options are an extended range Tockha-U (Scarab), R-360 Neptune in a land-attack role, or ATACMS – the US has denied supplying the missile for Ukraine’s HIMARS.
Hrim has the range and payload to reach and prosecute Saki AB. Akin to the 9K270 Iskander (Stone), Hrim possesses certain kinematic characteristics that could allow it to evade Russia’s local multi-layered air defenses. It is also public knowledge that the Ukrainian defense industry has produced a small number of prototypes. As seen in the case of the Neptune program, war conditions can force a developing missile into limited service.
Hrim-2 SRBM in desert camouflage
Tactical Report has a comprehensive report from January 2022 on the Hrim, including an exclusive update on the program’s status from the Saudi side, the financier and primary beneficiary of the SRBM project.
The SRBM theory continues to be backed by some circumstantial evidence, such as the craters, extent of damage, and even a possible missile magnetic signature detection. However, upon re-evaluation in the following days, we found that alternative explanations (see here and here) are also very likely and cannot be discarded.
Probably the most credible alternative is a short-range strike by SOFs with bomb-laden quadcopter drones or portable loitering munitions. These strike platforms do not have the payload to cause mass destruction, but they can ignite the presumed ammo dumps in the parking area.
Most available evidence, including the presence of craters and eyewitness videos from the event, can support both hypotheses in certain variations. Some key evidence is also missing, such as recovered attack system debris which could suggest a stand-off missile strike or bomb-laden drone launched by SOFs. There are also too many unknowns about crucial data points – e.g., contents of crates that exploded. Some likely held ammunition and fuel, as suggested by the massive detonations in the videos, but others may have not.
Both US and Ukrainian officials are keeping a tight lip over what happened. However, separate unofficial Ukrainian reports have mentioned the use of a “device of Ukrainian manufacturing” (New York Times) and the work of SOFs and/or partisans (Washington Post). These reports can also be interpreted as both complementing and contradicting each other, adding to the information fog surrounding the event. Even Presidential Military Advisor Oleksiy Arestovych has put forward both theories to explain the attack.
Ukraine does want to reveal further information about the attack on Saki Air Base due to political and operations security reasons. Regardless of how the operation unfolded, the strike underlines a series of weaknesses in the Russian-occupied “fortress Crimea” including in air defense and/or perimeter security.
Snake Island, or Serpents Island (Ostriv Zmiinyi in Ukrainian; Insula Serpilor in Romanian) is an islet off Ukraine’s southwestern coast and near the Danube Delta in the Black Sea. With…
Snake Island, or Serpents Island (Ostriv Zmiinyi in Ukrainian; Insula Serpilor in Romanian) is an islet off Ukraine’s southwestern coast and near the Danube Delta in the Black Sea. With a surface of 17 ha, the islet became a major flashpoint between the Ukrainian Operational Command-South and the Russian Navy, following the Russian seizure of Snake Island on 24 February 2022. Persistent Ukrainian counterstrikes forced Russia to retreat on 30 June 2022, ending a 127-day occupation. Following Ukraine’s victory, many have questioned the military and political value of the bitterly contested island. Our analysis seeks to shed light on Snake Island’s multilayered significance in the Black Sea and Odesa theaters of operations.
I. Occupied in the opening hours of the invasion on 24 February 2022, Snake Island held, and still holds, kaleidoscopic importance for Moscow’s objectives in southwestern Ukraine and the Black Sea, including against NATO. Snake Island’s significance spans across all three levels of war – tactical, operational, and strategic – and serves three goal lengths, as follows:
A.Short-term: Support the Odesa Offensive and Anti-Shipping Mission.
Secure the seaway to the Ukrainian shoreline in preparation for Russia’s planned amphibious assault on Odesa- part of the failed Operational Direction-Southwest (OD-SW).
Seize key maritime terrain to support the interdiction of the Odesa-Bosphorus shipping lanes and subsequent blockade of Ukraine’s port.
B. Medium-term: Become a thorn in NATO’s Southeastern Flank.
Establish a SIGINT listening station (COMINT and ELINT included) to monitor NATO activities in SE Romania.
Expand offensive potential: kinetic effectors and electronic warfare (EW) systems.
C. Long-term: Seize lucrative offshore gas platforms located in NATO member Romania’s Exclusive Economic Zone (EEZ).
Contest and claim parts of Romania’s EEZ, which has an estimated potential of 200 billion cubic meters of natural gas. The XIII Pelican, EX-27 Muridava, and EX-28 EST Cobalcescu concessions are likely targets. The development of the Black Sea gas fields would make Romania the European Union’s biggest natural gas producer and, inherently, a competitor to Russian gas.
Russia has similarly captured all energy-rich parts of Ukraine’s EEZ since “little green men” annexed Crimea in 2014. Extending into new reserves aligns with Russia’s plans to assert military and economic dominance over the Black Sea.
II. Ukraine’s constant barrage of missile and artillery strikes successfully extirpated the Russian presence on Snake lsland. Bayraktar TB-2 combat drones conducted at least ten kinetic operations and were involved in a number of ISR and fire control taskings. The R-360 Neptune and Harpoon anti-ship missiles (AshMs) also played a key role, countering the Russian Navy’s sea-lines-of-communications (SLOC) and sinking at least six vessels, including the Russian Black Sea Fleet (BSF) flagship Moskva. At least one manned aircraft strike was recorded and featured a low-altitude bombing by a pair of Su-27s (AFIC/NATO Reporting name: Flanker). Artillery systems such as the Czech-made Bohdana were responsible for putting the last nail in Russia’s coffin, decimating the man-made infrastructure on the island until the occupiers were left with no physical cover.
III.It is imperative that Russia does not re-capture Snake Island, even at the cost of the island becoming “no man’s land .” At the time of writing, Snake Island is in limbo – vacated by the Russians, re-claimed by Ukraine, but not yet re-garrisoned. Even if Ukraine does not create an outpost on the island, keeping the key maritime terrain from Russia’s hands is enough to deny Moscow’s original objectives.
Change detection analysis of Snake Island pre-invasion (Google Earth imagery from 2016) and post-withdrawal of Russian forces (30 June 2022). Imagery credits: Maxar Technologies; annotated by T-Intelligence.
SHORT-TERM OBJECTIVES: ODESA OFFENSIVE AND ANTI-SHIPPING MISSION
SECURE SEAWAY FOR ODESA OFFENSIVE a.k.a OD SW
1. Russia seized Snake Island from Ukrainian forces to secure the SLOC in preparation for an amphibious assault on Odesa- part of the Odesa offensive, designated Operational Direction Southwest (OD-SW). A Russian Navy (RuN) surface action group led by the now-sunk Slava-class Moskva was in charge of the operation, which took place in the early hours of February 24. Immediately after the takeover, Russian marines garrisoned the island to deny key maritime terrain to Ukraine and exploit its tactical-operational value.
2. Russia started to turn Snake Island into an expeditionary outpost in support of the maritime component of OD-SW. Russian forces had anchored patrol boats near the island and, also pressed by Ukrainian air strikes, deployed short-range air defenses (SHORAD). In addition, Snake Island could have been used to base forward arming and refueling points (FARP) to boost sortie rate and repetition during air-naval attacks on Odesa and naval intelligence, surveillance, and reconnaissance (ISR) assets.
3. The collapse of OD-SW in the steppes of Kherson operationally “orphaned” Snake Island. Ukraine’s Operational Command-South (OC-S) defeated the Russian Southern Military District (MD) grouping at Mykolaiv and Voznezensk and drove the invaders down to Kherson city in mid-March 2022.
Assessed Russian OD-SW map, reprinted from “Target Transnistria: Russia’s Maskirovka and Pathways to Escalation (Threatcast)” (T-intelligence)
4. Russia’s follow-on plans for Snake Island largely depended on capturing the Odesian littoral. Russian control of the shoreline would have secured Snake Island from land-based threats. But with OD-SW in shambles and the Odesian coast still under Ukrainian control, the Russian garrison on Snake Island became a fixed, vulnerable target. The new situation likely prompted Sevastopol commanders to effect a cost-benefit analysis of abandoning versus defending the island, with the top brass opting for the latter. As Ukraine’s OC-S started lashing back with air, artillery, and anti-ship missile strikes at Snake Island, the Russian forces were forced on the defensive.
Sevastopol’s attempt at holding Snake Island despite the terrain entering a state of tactical limbo indicates operational stubbornness, continued interest in the Odesa offensive as a later option, and commitment to longer-term political objectives. The latter point rendered Snake Island a politically-charged issue, which most likely influenced Sevastopol’s decision to stay.
TOLLBOOTH TO INTERDICT MARITIME SHIPPING
6. The secondary objective of Russia’s designs on Snake Island was to augment the BSF in interdicting the shipping lanes to and from Ukraine. Part of this plan was to deploy land-based anti-ship missiles, coastal surveillance radars, and naval ISR assets on Snake Island. There were also indications of plans to base fast patrol craft out of the island. While BSF warships and naval aviation are primarily conducting the anti-shipping mission, a sensor-effector pair on Snake Island could have provided an additional layer to Russia’s maritime construct.
Annotated screenshot of MarineTraffic.com density map (T-Intelligence). As the map shows, Snake Island overlooks the main trade artery in the western half of the Black Sea.
7. Snake Island never got to contribute to the anti-shipping mission as the Russian occupants were busy surviving Ukraine’s constant barrage of missile and artillery strikes. Based on open-source reporting, Ukraine conducted at least 16 separate attacks on Russian positions between March and late June. Bayraktar TB-2s initially spearheaded ten kinetic operations and were involved in a number of ISR and fire control taskings. The R-360 Neptune and Harpoon anti-ship missiles (AshMs) also played a key role, countering the RuN’s SLOCs, and sinking at least six vessels, including the BSF flagship Moskva. At least one manned aircraft strike was recorded and featured a low-altitude bombing by a pair of Su-27s (AFIC/NATO Reporting name: Flanker)
Artillery systems such as the Czech-made Bohdana were responsible for putting the last nail in Russia’s coffin, decimating the man-made infrastructure on the island until the occupiers were left with no physical cover.
8. In response to Ukraine’s hammering, Sevastopol rushed 9K35 Strela-10 (SA-13 Gopher), Pantsir S-1 (SA-22 Greyhound), and Tor-M2 (SA-15 Gauntlet) SHORADs along with ZU-23-2 anti-aircraft (AA) guns to the island, but with little effect. Ukraine destroyed most of the AA guns and SHORADs, especially the first batches of Strelas. With just 17 ha to rove around to escape Ukrainian targeting, the SHORADs were likely more offline than active and therefore suppressed.
9. The loss of Snake Island had little effect on Russia’s anti-shipping mission, which continues to be spearheaded by BSF surface action groups and naval aviation. Ukraine’s increasingly diverse and lethal coastal artillery and multi-rocket launcher systems (MLRS), often paired with unmanned aerial vehicles (UAVs), have re-shaped the BSF’s risk assessment. Early signs indicate that Russian vessels are now forced to operate at arm’s length from the Ukrainian littoral.
MEDIUM-TERM OBJECTIVES: LISTENING STATION AND OFFENSIVE POSTURE
10. Left unchecked, the Russian occupation could have filled Snake Island with antennas, direction-finders, and other technical equipment to collect Signals Intelligence (SIGINT) on key military facilities in NATO member Romania’s southeast (SE). Just 40 km from Romania, the unrealized Snake Island listening station would have likely pointed its antennas at Mihail Kogalniceanu and Fetești air bases and command & control (C2) nodes to collect Communications Intelligence (COMINT). Electronic intelligence (ELINT) would have been an equally valuable objective, with specialized equipment attempting to collect, analyze and classify Romanian and NATO radar emissions to paint what is known as EOD, or electronic order of battle. An EOD typically contains the location of radars, frequencies, and operating bands used by said radars, emission signatures, etc.
11. Russia had already deployed some SIGINT equipment to Snake Island,according to the Secretary of Ukraine’s National Security and Defence Council (RNBO) Oleksii Danilov. The same source says that Russia already leveraged Snake Island’s position to monitor communications in Odesa province and Transnistria – read more about the breakaway region in our recent threatcast.
ENHANCED OFFENSIVE POSTURE
12. It is likely that Russia would have also sought to expand the island’s offensive potential with the deployment of a few but suitable systems in time. MLRS could have been a likely candidate to build up the island’s offensive posture, providing an attritable but effective firing solution. The BM-30 Smerch, with its assortment of 300mm rockets and warheads, can strike areas 90 km away. More high-end systems such as the K-300P Bastion (SS-C-5 Stooge) could have also been considered. Packing a double-punch against land targets and ships 300 km away, Bastion is uniquely suited for coastal-based engagements. However, the island’s small and complex surface would have posed a continuous limitation regarding build-up potential (i.e., number of systems) and system survivability (limited shoot-and-scoot).
13. Besides kinetic effectors, Electronic Warfare (EW) systems would have been some other logical candidates for beefing up Russia’s offensive posture. Examples are the Krashuka, 1L22M Avtobaza-M, and Repellent-1. With a powerful electronic attack (EA) capability, Russia’s EW systems can jam communications, navigation systems such as GPS, and drone down/up-links, to ranges in excess of 250 km. Some systems like the Krashuka-4 can even jam spy satellites in the Low-Earth orbit (LEO). Russian EW systems have been present in Ukraine since the early days of the invasion, with some being captured and destroyed by Ukrainian forces.
LONG-TERM OBJECTIVE: BLACK SEA ENERGY THEFT
14. The Kremlin’s long-term goal was, and likely still is, to leverage Snake Island’s position to contest Romania’s energy-rich exclusive economic zone (EZZ), which holds an estimated 200 billion cubic meters of gas. We assess with a high degree of confidence that Russia would have rejected the 2009 Hague ruling on the Ukrainian-Romanian Snake Island dispute.
ICoJ litigation maps. Left shows the Romanian vs Ukrainian claims / Right shows the ICoJ agreed maritime boundary between the Romanian and Ukrainian EEZs (All rights reserved ICoJ 2009)
Key Background: In 2004, the Romanian government asked the Hague International Court of Justice (ICJ) to rule on the maritime boundary between Ukraine and Romania. The decision depended on whether the ICJ defined Snake Island as an island, part of Ukraine’s continental shelf, or an islet (i.e., “a rock” in Romania’s terms). In 2009, the ICJ ruled that Snake Island was too far from the seashore (Odesa) and small to constitute a benchmark in setting boundaries. The ICJ ruling satisfied 80 percent of Romania’s claims over the continental shelf and placed 9,700 square kilometers of waters under Bucharest’s control.
15. Russian claims over Romania’s EEZ are difficult to threatcast but would most likely include at least the gas fields closest to Snake Island:
XIII Pelican: gas potential confirmed (discovery wells are yet to be appraised). Black Sea Oil & Gas (BSOG), which is owned by Carlyle International Energy Partners and the European Bank for Reconstruction and Development, holds the majority package to XIII Pelican.
EX-27 Muridava: gas potential confirmed and estimated at 169 billion cubic feet. British company Petroceltic holds the majority package.
EX-28 Nicolae Colbacescu: gas potential confirmed and estimated at 404 billion cubic feet. Muriadava and Colbacescu are underexplored and believed to hold more oil and gas deposits. Estimates for the two concessions are extracted from the 2013 Petroceltic annual results presentation and could be dated.
Gas concessions in Romania’s and Bulgaria’s EEZ (all rights reserved IHS Markit). Snake Island is seen as a small dot north of the XIII-Pelican concessions.
Key Background: The development of the Black Sea gas fields would make Romania the European Union’s biggest natural gas producer, according to the Oil and Gas Employers Federation (FPPG). Romania would not only become self-sufficient* but also compete in the natural gas market with Russia. Romania currently imports less than most European Union members (nearly 21 percent).
16. The most likely course of action would have been for RuN warships to ascertain de facto control over the targeted gas fields and escort Russian drillships to start exploitation. Sevastopol can profit from the Romanian Navy’s inability to police its waters following decades of underinvestment. From a political standpoint, the Kremlin would most likely leverage the grey zone nature of EZZs in the context of NATO’s Article 5. EEZs do not constitute territorial waters, and disputes over offshore energy deposits exist even within the Alliance (e.g., Turkey-Greece). However, Russia will probably tread lightly and probe NATO unity and Western European/North American commitment to the Black Sea states.
17. Due to the Montreaux Convention, NATO cannot establish a permanent, large-scale naval presence in the Black Sea. However, NATO assists Romania (and Bulgaria) through periodic port visits by individual warships or joint fleet units called NATO Standing Maritime Groups. NATO Enhanced Air Policing is another means to protect Romanian interests in the Black Sea, especially if the fighter units are also outfitted for anti-shipping. Despite continuous Allied support, local allies must do the heavy lifting through defense procurement to be able to police their territorial waters and EZZs.
18. Russia took over all energy-rich parts of Ukraine’s EEZ in a similar manner since “little green men” annexed Crimea in 2014. The Tavrida gas platforms, nearly 10 km east of the Snake Island, are one of the most forward-positioned offshore energy platforms that Russia has stolen from Ukraine. Ukraine recently hit the Tavrida gas platforms with two AshMs. Extending into new reserves aligns with Russia’s plans to assert military and economic dominance over the Black Sea.
19. Russia can still deter Bucharest from extracting gas from the Black Sea and attack (overt or cover) Romanian offshore energy infrastructure and drillships. RuN Spetsnaz units, subordinated to the Main Intelligence Directorate (GU), are uniquely qualified to conduct deniable attacks against drillships, offshore platforms used for housing and logistics, and oil rigs. Russian warships can stage shows of force and engage in a slate of other intimidation tactics, for example, exercises with subsequent notice to mariners/airmen (NORAM/NOTAM) that cover parts of Romania’s EEZ. If such provocations continue, Russia may discourage foreign investments in Romania’s offshore gas fields and prevent drilling activities completely.
Photos taken a few days ago by workers at Ana gas production platform (located 120 km offshore in the Romanian Black Sea exclusive economic zone). Russian Navy seems active in a wider area (but very carefull not to approach Romania’s territorial sea). pic.twitter.com/JXE1DSsds0
20. Russian warships have already shadowed Romanian gas platforms in June 2022, telegraphing a not-so-veiled reminder of Moscow’s ambitions in the Black Sea. It is imperative that Russia does not re-capture the island at any given time. Even if Ukraine does not establish an outpost on the island, keeping the key maritime terrain from Russia’s hands is enough to prevent Moscow from achieving its medium to long-term objectives in the western Black Sea. Snake Island is a fitting example of how even a tiny Russian land grab has far-reaching implications for Euro-Atlantic security.
This assessment was made using Open-Source Intelligence (OSINT) techniques and resources. Visit Knowmad OSINT to learn more about our online OSINT training.
KEY JUDGEMENTS I. We assess that Russian intelligence staged the recent provocations in Transnistria as part of a military deception campaign (“maskirovka”). Russia aims to prevent Ukrainian forces in Odesa…
I. We assess that Russian intelligence staged the recent provocations in Transnistria as part of a military deception campaign (“maskirovka”). Russia aims to prevent Ukrainian forces in Odesa province from reinforcing positions in Donbas and Kherson.
II. The Transnistrian maskirovka is contingent and could escalate into more palpable operational objectives in the short term. While the Operational Group of Russian Forces in Transnistria (OGRFT) is unfit to engage in significant combat, we cannot ascertain that Moscow will see the Group’s precarious condition as an obstacle to joining the fight. One possible scenario is that the OGRFT could attempt to contest or seize the Palanca road segment of the Reni-Odesa highway – controlled by Ukraine although on Moldovan territory (Stefan Voda raion).
III. We assess that the Kremlin retains the intention of linking up with Transnistria, but the Russian military is operationally unable to reach this goal in the medium term. The vast majority of Russian battalion tactical groups (BTGs) are committed to Donbas and Kherson, where they are desperately needed, and continue to suffer a heavy attrition rate.
IV. We have threatcasted three notional scenarios that Russia might consider at any given time to link up with Transnistria:
landbridge from Kherson to Transnistria (via Odesa);
air assault into Tiraspol;
amphibious landing in Budjak province followed by an incursion into Moldova’s Stefan Voda raion.
These scenarios are purely imaginative and do not aim to predict to future. Instead, their role is to reduce uncertainty.
SITUATION REPORT: RUSSIA ENGINEERS A POTENTIALLY MALIGN DISTRACTION
OGRFT: THE FORGOTTEN “LITTLE GREEN MEN”
1. The self-proclaimed and unrecognized “Pridnestrovian Moldavian Republic” hosts roughly 1,000 to 1,500 Russian soldiers as part of the Operational Group of Russian Forces in Transnistria (OGRFT). The OGRFT is the “peacekeeping force” Russia left behind after the 1992 invasion of Moldova. It is a direct successor to the locally-based Soviet 14th Guards Army, which served under the command of the Odesa Military District. The OGRFT consists of three units:
-82nd Separate Guards Motorized Rifle Battalion [unit 74273]
-113th Separate Guards Motorized Rifle Battalion [unit 22137]
-540th Separate Command Battalion [unit 89353]
Together these three units could likely assemble only one battalion tactical group (BTG) – Russian Ground Forces’ (RGF) combined-arms formations for combat use. Based on our open-source research, all three OGRFT units are headquartered at Karl Liebknecht 159, Tiraspol, Republic of Moldova. However, the units are most likely garrisoned elsewhere, as the Soviet-era military quarter has been largely abandoned and re-purposed into new apartment projects.
GEOINT: Overview of OGRFT HQ and assessed affiliated sites in Tiraspol
2. The OGRFT has three operational objectives in the region:
-Patrol the Transnistrian border (and engage in the related capacity-building efforts)
-Guard ammunition storage sites in Transnistria.
-Serve Moscow’s interest in whatever way necessary.
3. While the OGRFT is probably the most ill-equipped and undertrained force in the entire Russian Armed Forces, it does pose a serious threat to the Moldovan military and could become a tactical distraction for Ukraine.
MASKIROVKA: KEEP UKRAINIAN UNITS FIXED IN ODESA, AWAY FROM “REAL FIGHT” IN KHERSON, DONBAS
4. We assess that Russian intelligence staged the recent provocations in Transnistria as part of a military deception campaign (“maskirovka”). Russia aims to prevent Ukrainian forces in Odesa province from reinforcing positions in Donbas and Kherson. Russia’s remaining main lines of effort (LOEs) in the invasion are the Donbas offensive and consolidating gains in Kherson province. Ukrainian reinforcements in these theaters could put a decisive dent in Russia’s sluggish and largely unsuccessful operations.
5. Russian intelligence – likely FSB units attached to the OGRFT – orchestrated a series of incidents in Transnistria:
a rocket-propelled grenade attack on the so-called “Ministry of Security;”
two destroyed antenna towers in Grigoriopol raion (used to broadcast Russian radio channels).
claimed gunshots towards Cobasna village which hosts a Soviet-era ammunition depot.
explosions at Tiraspol airfield (confirmed by Moldovan authorities).
Reported explosions at a border crossing with Ukraine.
6. The “local government” responded by placing the Transnistrian military on high alert and ramping up anti-Romanian and anti-Ukrainian rhetoric. Moldovan and Ukrainian press outlets report that the Transnistrians have established checkpoints throughout the region (confirmed via social media photos), and are preparing for general mobilization (claim denied by the Transnistrian “authorities”). Tiraspol has placed its military on high alert according to the Ukrainian General Staff.
MASKIROVKA IS CONTINGENT, ESCALATION POSSIBLE
7. While the recent provocations constitute a benign feint, the OGRFT’s maskirovka is contingent and could escalate into more palpable operational objectives in the short term. To craft a credible threat that will force the Ukrainians to divert attention to the Dniester river, the OGRFT (with or without the Transnistrian military) could launch limited cross-border attacks. Alternatively, although less likely, the OGRFT could launch a limited land incursion.
8. One possible scenario is that the OGRFT could attempt to contest or seize the Palanca road segment of the Reni-Odesa highway – controlled by Ukraine although on Moldovian territory (Stefan Voda raion). Chisinau transferred the 7.7 km road segment near Palanca to Ukraine as per the Additional Protocol (AP) to the Treaty between the Republic of Moldova and Ukraine on the State Border (August 18, 1999). The two parliaments ratified the AP in 2001.
Palanca Road (T-Intelligence 2022)
The Palanca road is now the sole remaining ground line of communication (LOC) between NATO member Romania and the eastern raions of Odesa province, as Russia bombed and damaged the Pidyomnyy bridge near Zatoka on April 26. The
Russia bombed the Pidyomnyy bridge for military and economic reasons. On the one hand, Russia wanted to disrupt the flow of Ukrainian products exported through the Romanian seaport of Constanta as Russia has blockaded Odesa and the other Ukrainian ports. On the other hand, with the bridge disabled, Russia severed NATO’s most direct LOC with Ukraine’s frontlines.
9. While the OGRFT is unfit to engage in significant combat, we cannot ascertain that Moscow will see the Group’s precarious condition as an obstacle to joining the fight. Based on our estimates, Belarusian President Lukashenko’s war map, and other indicators, Transnistria was scheduled to join the now-failed Southwestern Operational Direction (OD). The OGRFT and the Russian Southern Military District (MD) grouping would have linked up in the process.
Transnistrian and Russian link-up to take Odesa is shown in Lukashenko’s warplan presentation (modified version of EyePress News/Shutterstock image)
RUSSIA-TRANSNISTRIA LAND-BRIDGE UNFEASIBLE IN NEAR TERM
10. We assess that the Kremlin retains the intention of linking up with Transnistria, but the Russian military is operationally unable to reach this goal in the medium term. Sandwiched between a pro-European & NATO-friendly Moldova (Maia Sandu government) and a hostile Ukraine, the OGRFT is vulnerable to an attack. However, Russian BTGs are committed to Donbas and Kherson, where they are desperately needed, and continue to suffer a heavy attrition rate. A significant portion of BTGs is combat ineffective and close to collapse. Re-deployment will most likely not be an option. On its own, the OGRFT is unlikely to be able to break through Ukrainian territory and spearhead a landbridge. The calculus could change if Russia declares a general mobilization and generates new manpower.
THREATCAST: THREE NOTIONAL SCENARIOS FOR A RUSSIA TO LINK UP WITH TRANSNISTRIA
We have threatcasted three alternative future scenarios that Russia might consider to link up with Transnistria:
Landbridge from Crimea to Transnistria (via Kherson-Mykolaiv-Odesa).
Air assault on Tiraspol.
Amphibious landing in Budjak.
Disclaimer: Please note that the following scenarios are speculative and present a loose snapshot of possible war plans. This threatcast aims to consider some, but not all, of Russia’s possible actions in Transnistria – caveats apply.
LAND-BRIDGE (TRIED AND FAILED)
11. This scenario looks at a land corridor from Crimea to Transnistria, drawing from Russia’s tried-and-failed Southwestern OD. Such an objective would require an extensive, multi-stage offensive that would be costly and grinding for Russia. However, for the sake of this exercise, let us consider the conditional victories for Russian forces to “shake hands” with the OGRFT by land:
Scenario 1: Land Bridge via Odesa (T-Intelligence 2022)
a. Starting from Crimea-Kherson, Russia would need to isolate or capture Mykolaiv and cross the Bug river. Considering that Ukrainian forces would likely destroy the bridges to stall or stop the offensive, Russia would need to set up pontoon bridges in select areas while under fire from the opposite shore.
b. Once across the Bug, Russian forces would need to cross the Tylihul. If successful here, the Russians would secure their LOCs and ensure a steady flow of logistics across the two rivers.
c. Isolating or capturing Odesa would be the invading force’s next and most draining objective. Besieging Ukraine’s third-largest city – over 1 million people – would be a gargantuan effort in terms of time, resources, and manpower. From a humanitarian perspective, the brutal two-month siege of Mariupol would be a cakewalk in comparison.
d. The OGRFT could join the fight as a support element and link up with the Russian forces around Odesa in the process. However, a successful land bridge would depend on the long-term control of the Kherson-Odessa corridor.
12. Russia has already pursued this blueprint and failed in the early stage of the Southwestern OD campaign – it cannot replicate it soon. Unable to capture Mykolaiv, Russia chose to (unsuccessfully) isolate the city and look for a gap in Ukrainian defenses up the Bug river valley. A small contingent of forces advanced to Voznesensk (March 3) in an attempt to take the city and cross the Bug. Fearing that a Russian victory in Voznesensk would greenlight the OGRFT to open the second front, Ukraine blew up the railway bridge over the Kuchurhan river on March 4. After days of fighting, Ukrainian defenders crushed the Russian advance between March 13-16 and launched a counter-attack. Ukrainian forces chased the Russians down to Mykolaiv and ultimately drove them back to Kherson, where the Russian Southern MD grouping remains today. Given the premature failure, the OGRFT was never called up to assist.
AIRBORNE ASSAULT ON TIRASPOL
13. Link-up with the OGRFT via airbridge is possible, although the operation would have a low-probability of success (LOS). The Russian Air Assault Force (Vozdushno-desantnye voyska Rossii/VDV) would spearhead the mission supported by rotary-wing units from the Russian Aerospace Forces (RuAF) to airlift troops and equipment such as BTRs, artillery, and rocket launchers. Airfields in Crimea and Kherson are possible embarkation points, while Tiraspol airfield is the projected end destination. Infiltration routes are of two categories – through denied airspace or around it – posing a wide array of issues and hazards.
Scenario 2: Air Assault on Tiraspol
a. Pathway 1 (Direct Flight: Chernobayanka to Tiraspol, 230 km): Probably the most LOS route. VDV would launch from an airfield regularly hit by Ukrainian artillery, flying over a high-risk air defense area. There is likely a high density of Ukrainian-operated man-portable air defense systems (MANPADS) with operators on high alert and increased readiness in the Mykolaiv-Odesa area. MANPADS of various ranges and kinematic effects provide a diverse and overlapping low-altitude, short-range coverage. Russian helicopters would need to fly low to minimize exposure to the Odesa-based S-300 radars, which would bring them right into the engagement envelope of MANPADS.
b. Pathway 2 (Avoid Odesa: Chernobayanka to Tiraspol, 340-360 km): This flight path significantly increases survivability by circumnavigating the large MANPADS concentration in the Odesa-Mykolaiv axis and S-300-controlled airspace. However, portable or mobile air defenses are likely also positioned west of Odesa, and increased flight time will limit the maximum take-off weight of the attack and transport helicopters. The longer the flight time, the higher the chances that NATO and Ukrainian sensors will detect the airborne assault from an early stage.
c. Pathway 3a (Direct flight: Crimean airfields to Tiraspol, 350-400 km): Another low survivable flight path. Flying through the S-300 “bubble” requires significant electronic warfare (EW) and anti-radiation support. The RuAF will likely need to conduct suppression of enemy air defenses (SEAD) sorties to open up the airspace for the VDV flight to Tiraspol. For example, the VDV’s assault on Hostomel airfield through Ukrainian air defenses was also enabled by a combination of electronic and missile attacks according to a RUSI report . However, the large density of MANPADS in Odesa poses a constant threat to low-altitude air operations., especially if the assault is not done under the cover of darkness.
d. Pathway 3b (Avoid Odesa: Crimean airfields to Tiraspol, 350-500 km): Probably the most survivable flight path but also the longest, which restricts airlift capacity (troop number and equipment quantity) and exposes the operation the most to NATO and Ukrainian radars and ISR assets (intelligence, surveillance, and reconnaissance).
Note: The VDV is one of the most attrited Russian service branches in the war in Ukraine. Significant regeneration would be required before the VDV could hope to pull off such a stunt.
AMPHIBIOUS ASSAULT ON BUDJAK
14. Following the forced closure of the Pidyomnyy bridge, many have speculated that Moscow may be eyeing an amphibious assault on Ukraine’s Budjak region (southern Bessarabia) – Ismail, Bolhrad, and Bilhorod-Dnistrovsky raions in western Odesa province. Russia’s supposed bet is that the landing would be unopposed as Budjak is undermanned by the Ukrainian military and largely disconnected from the rest of the country.
Scenario: Amphibious Landing in Budjak
15. An amphibious assault on Budjak is theoretically possible but technically difficult and of high risk. The Russian Navy would have to assemble an armada of amphibious vehicles, landing ships and craft, frigates, and other heavy warships, supported by air assets and likely surface to surface missiles. Preparations for such an operation would leave plenty of tell-tell signs that NATO could detect and forward to Ukraine.
16. Ukraine has mined Odesa’s littoral waters and lined up its shores with anti-ship missiles (AshM), including Neptune (300 km range) and, in the future, truck-mounted Brimstones (range unknown, likely short) – as promised by British Prime Minister Boris Johnson. The Ukrainian Navy has also effectively posed a credible anti-ship threat, using Neptunes to sink the “Moskva” Slava-class cruiser and Bayraktar drones to destroy patrol boats near Snakes Island.
17. Budjak’s shore is unideal for amphibious assaults. The coastline mainly consists of small and narrow beaches excavated below the street level with no connection to road networks. Most beaches are flat and lack cover or port facilities. The defender has a clear high-ground advantage. Other areas of the Budjak are dominated by lagoons where landing parties can easily become trapped. Negotiating the terrain is possible in some areas but would make for a sluggish escape from the “deathtraps” that are Budjak’s beaches.
18. Provided the landing is successful, the amphibious force would need to bolt towards Moldova’s Stefan Voda raion and link up with Transnistria. Russian troops would need to occupy Stefan Voida raion to ensure a land link to the OGRFT and deny the last LOC from Romania’s southeast (NATO) to Ukraine. The OGRFT could help by mimicking feint attacks from Bender (Tighina) towards Anenii Noi or Causeni and distract the Moldovan military.
19. The operations’ success rests on whether the landing party could secure the Budjak bridgehead and sustain an incursion towards Transnistria at the same time. A successful Ukrainian counter-attack could split the invaders into two vulnerable pockets to be captured or annihilated.
20. Since it further invaded Ukraine in late February, Russia has demonstrated a severe lack of risk aversion regarding military action. Moscow may continue to greenlight operations that are objectively “suicidal” or “likely to fail.” Russian military commanders might interpret the operational success probability differently and assess that the payoff would offset the costs. While these notional scenarios are purely an exercise in imagination, they could be options on the table for Russia.
A Russian missile attack on Kramatorsk train station in eastern Ukraine has killed at least 50 people, likely only civilians, and wounded 100 others, on 8 April 2022. Kramatorsk hosts…
A Russian missile attack on Kramatorsk train station in eastern Ukraine has killed at least 50 people, likely only civilians, and wounded 100 others, on 8 April 2022. Kramatorsk hosts the headquarters of the Joint Force Operations (JFO), which is the Ukrainian military effort to counter the Russian occupation of Donetsk and Luhansk. After the Kremlin downsized its war aims, the JFO is bracing for a supercharged Russian offensive in eastern Ukraine.
I. Russian forces used the Tochka-U short-range ballistic missile (SRBM), our analysis of the missile wreckage concludes. Russia still has some Tochka-Us in service despite claims to the contrary. Tochkas were filmed re-deploying from southern Belarus as early as 30 March 2022. In addition, Russia likely has a vast stockpile of combat-worthy Tochkas in reserve.
II. Russia has announced that it attacked several railways nodes in eastern Ukraine on 8 April 2022, including Slavyantsk, but refused to claim the Kramatorsk missile strike. Instead, the Kremlin is pushing a false-flag disinformation campaign to shift the blame on Kyiv.
III. The targeting of civilians might have been the sole objective of Russia’s missile strike, considering that the Kramatorsk train station is a well-known evacuation site. Violence against the enemy’s civilian population is a hallmark of Russian urban warfare.
WEAPON USED: TOCHKA-U (SS-21 SCARAB)
1. Missile debris photographed near Kramatorsk train station is consistent with the booster section of a 9K79-1 Tochka-U (AFIC/NATO Reporting name: SS-21 Scarab) short-range ballistic missile (SRBM). Various online photos and 3D renderings can be used to compare and validate. The most notable identifiers are the lattice aerodynamic rudders on the tail section, the four fins, and the metal line.
Visual analysis based on comparison between debris photo and online 3D rendering of Tochka-U (T-Intelligence 2022)
2. The Tochka-U can carry various warheads – conventional, high explosive, fragmentation, chemical, and nuclear – with a maximum payload weight of 480 kg. With a circular error probability (CEP) of 15 meters, the Tochka-U was designed for area effect in locations where collateral damage is not a concern.
TARGET: KRAMATORSK TRAIN STATION
3. Geolocation confirms that the attack took place at Kramatorsk train station. Multiple independent comparisons of eyewitness multimedia material from the target site with online images of Kramatorsk train station provide irrefutable validation.
Attack site cross-referenced with Google Maps imagery (T-Intelligence 2022)
4. A closer inspection of the target site shows that most of the destruction rained on the railway platform. The area includes an outdoor sitting area, where hundreds of civilians were waiting to evacuate by train.
TARGETING KEY EVAC CORRIDORS
5. The targeting of civilians might have been the sole objective of Russia’s missile strike, considering that Kramatorsk train station is a key evacuation site. According to the city’s mayor, around 8,000 civilians have passed through Kramatorsk train station each day for the past weeks. The railway platform and outdoor seating area absorbed most of the damage; the railway remains functional.
Please share! World must know the truth!
The 🇷🇺 occupiers hit the #Kramatorsk railway station with a Tochka-U, where thousands of peaceful Ukrainians were waiting to be evacuated.
UPD. 39 dead, including 4 children.
Voice: God, there are so many children! How many corpses! pic.twitter.com/NiuV9o4zwY
— Verkhovna Rada of Ukraine – Ukrainian Parliament (@ua_parliament) April 8, 2022
6. The high number of casualties and lack of a major impact crater is consistent with the damage caused by a fragmentation warhead. Tochka’s 9N123K fragmentation warhead contains 50 submunitions (type 9N24) that deploy thousands of metal shrapnel pieces in the target area. The use of fragmentation submunition would also explain the steady rise in the death toll – initial reports said 27 killed, but the estimate went up to over 50 in several hours.
7. Targeting Kramatorks train station to reduce its logistical potential or destroy a military shipment might have been a secondary objective. If that was the case, the Russian military would have most likely fitted the Tochka-U with a conventional high explosive warhead and concentrated the strike on the railways. Even in the unlikely hypothesis that the infrastructure was the main target, the Russian Tochka-U units showed severe and inexcusable disregard for the heavy civilian presence at Kramatorsk train station attempting to evacuate.
MISSILE LAUNCH SITE: RUSSIAN CONTROLLED TERRITORY
8. Several videos are circulating on social media show missile launches that might be related to the Kramatorsk attack.
9. Preliminary geolocations put the approximate launch near Shakhatersk inside Russian-held territory. The distance from the estimated launch site to Kramatorks is 109 km, which falls within Tochka’s maximum engagement range.
RUSSIA ANNOUNCED ATTACKS ON TRAIN STATIONS IN EASTERN UKRAINE
10. On the morning of 8 April 2022, the Russian Ministry of Defense (MoD) announced on Telegram that it had conducted missile strikes that “destroyed weapons and military equipment of the Ukrainian military reserves arriving in Donbass at Pokrovsk, Slavyansk and Barvenkovo railway stations.” Interestingly, the strike on Kramatorsk, the sister city of Slovyansk, was omitted.
ANNA NEWS CONFIRMED THE KRAMATORSK TRAIN STATION ATTACK (THEN DELETED IT)
11. ANNA News, a known Russian disinformation outlet, quickly confirmed the Kramatorsk missile attack on Telegram, and claimed based on “verified information” that a Ukrainian military train was the intended target. After news broke out that dozens of civilians died in the attack, ANNA News deleted the Telegram announcement. Luckily enough, many users managed to screenshot the post before it disappeared.
Kremlin affiliated media first proudly reported the #Kramatorsk massacre, claiming their missile hit an ammunition train that arrived yesterday evening.
After the appearance of civilian casualties, they started blaming Ukraine.
Same story as with #MH17 in 2014.#PutinAtWarpic.twitter.com/D3yMZSshbJ
DON’T CALL IT A COMEBACK: TOCHKA-Us STILL IN SERVICE WITH RUSSIAN MILITARY
12. Despite official denials by Moscow, the Russian military still uses Tochka-U SRBMs. Some Tochkas probably never left service, while others were re-operationalized to preserve the Iskander SRBM stockpiles.
SPOTTED IN BELARUS
13. On 30 March 2022, footage posted on social media showed Tochka-U tractor erector launchers (TELs) with the Russian identification marking “V” on railcars stopped at a train station in Voevoda village, Belarus. The Voevoda rail stop is 20 km southeast of Gomel and 30 km from the Ukrainian border. Geolocation confirms the event and puts the train at 52°18’31.5″N 31°12’32.0″E. The original source, TikTok user “@_taiger_Z”, uploaded the video on 30 March 2022 (archived).
a frame collage showing Tochka-Us on railcars in southern Belarus (T-Intelligence)
14. According to Conflict Intelligence Team (CIT), who checked railcar databases, the Tochka-Us were rushed to Belgorod in Russia (40 km from Kharkiv, Ukraine). The end destination suggests a likely redeployment amidst Russia’s planned focus on eastern Ukraine as part of its downsized war plans.
15. Before 31 March, a V-marked convoy, including eight vehicles consistent with Tochka-U TELs and transloaders, was filmed moving along the M10 highway from Rechitsa to Gomel. Defense blog also featured this video in an article marking the return of Tochka-Us to active service with the Russian military. The exact date of this video could not be established, but it is possible that it was filmed on the morning of 30 March, as the uploader claims.
A column of Russian equipment with “V” marks was moving from Rechitsa towards Gomel along the M10 highway.
There were at least 8 Tochka-U, several BTR-82a, about 9 KamAZ trucks, some of which are carrying Tochka-U missiles, communication vehicle and a crane. pic.twitter.com/UFF0cmrgv5
16. Historical weather data indicates that it snowed in Gomel between 08:30 and 10:30 on 30 March, with temperatures between -1 and 3 Celsius. In Rechitsa, the temperature was lower, ranging from -2 to -4 degrees. Optical satellite imagery could not be obtained for verification due to cloud cover. It is also possible that the video was filmed in late February, during or after the Russian-Belarussian exercises that Moscow used as cover for its deployment north of Kyiv.
Historical weather forecast for Gomel and Rechitsa (Belarus) on 30 March 2022
47th MISSILE BRIGADE LIKELY STILL USES TOCHKAS
17. Russia’s 47th Missile Brigade (Southern Military District/MD), based in Korenovsk, was still using Tochkas in 2021, according to CIT. The 47th has only received Iskander SRBMs in January 2022, and as the CIT analysts argue, the unit likely continues to field Tochkas as a stopgap measure until full operational capability of the Iskanders is achieved. The Donbas is the Southern MD’s area of responsibility.
The Russian MoD claims that Russia does not have “Tochka-U” missile systems. This is demonstrably untrue.
Russia’s 47th Missile Brigade from Korenovsk was armed with Tochka-U and received Iskander missile systems only this January, unlikely to have mastered them already. pic.twitter.com/1FHBQWlcQX
18. Hundreds of Russian Tochka-U SRBMs are likely kept in reserve and can be swiftly re-operationalized. The vast majority of Russian missile brigades retired their Tochka-U systems between 2010 and 2019 when they received the new generation of operational-tactical Iskander missiles. This means that most Tochkas have not been disabled and remain functional – most militaries allow for several years to pass until they start destroying retired equipment.
A medical complex in the southern city of Mariupol, Ukraine, has been destroyed in a reported airstrike on 9 March 2022, social media videos show. It is virtually certain that…
A medical complex in the southern city of Mariupol, Ukraine, has been destroyed in a reported airstrike on 9 March 2022, social media videos show. It is virtually certain that Russia has conducted the attack. Russian forces have encircled the city since 1 March, uniting advancing forces from Crimea with those in Donetsk oblast, and enjoy local air superiority. Since the pincer move was completed, Russian troops have resorted to unrestricted, punitive strikes to force the Ukrainian soldiers and population in Mariupol to surrender.
Russia destroyed a childrens and maternity hospital in Mariupol. Casualties are unknown. This is so outrageous and Putin’s war criminals continue to strategically target children, women, elderly pic.twitter.com/we0eoOEKcP
Mariupol. Direct strike of Russian troops at the maternity hospital. People, children are under the wreckage. Atrocity! How much longer will the world be an accomplice ignoring terror? Close the sky right now! Stop the killings! You have power but you seem to be losing humanity. pic.twitter.com/FoaNdbKH5k
Eyewitnesses report that the strike was carried out by aircraft. The blast carved a giant crater in the middle of the medical complex, which the New York Times estimates to be 10 feet deep. If the attack was air-launched, Russia likely employed a FAB-series air-dropped bomb, likely FAB 500 (the numbers indicate its mass in kilograms). Russia has already used FAB 500 bombs in Chernihiv, including against residential areas. The possibility of a surface to surface attack also exists, however, one single artillery shell is unlikely to have caused this impact mark. No weapon debris has been documented so far.
Just try and realize this.
Russia today dropped a 1000-kilogram airbomb in downtown Mariupol.
In a location between a hospital and birthing center.
Just because it can. pic.twitter.com/iH4NgvfwXF
A regional official told Ukrainian media that 17 people were injured, including staff and patients. No deaths have been reported so far, according to Pavlo Kyrylenko, the head of the Donetsk regional administration, as quoted by Interfax.
FACILITY AND LOCATION
Geolocation confirms that the building complex seen in the footage is indeed a medical facility, appearing as Dytyacha Konsul’tatyvno-DIahnostychna Poliklinika (translates in Children’s Consulting and Diagnostic Polyclinic) on Google Maps, located in Mariupol. As photos and open source information indicate, a maternity ward is also part of the medical complex.
It is possible that Russia deliberately targeted this facility as part of its siege tactics. As extensively seen during Russia’s siege operations in Syria, Russian forces purposely target medical facilities to deprive the local population and defenders of healthcare and other key services. Such attacks also serve a psychological purpose: to terrorize the population into submission. Thrown into a humanitarian disaster, an attrited population and defending force are less capable of combat and more likely to surrender.
MARIUPOL UNDER SIEGE
The hospital attack is just one of the many strikes that Russia has conducted on Mariupol on 9 March, as it tries to seize the city. Maxar’s very high-resolution satellite imagery reveals the extent of damage caused by Russian shelling in the past 24 hours. As the photos show, residential homes, apartment complexes, and shopping centers have been badly damaged and destroyed. The deliberate targeting of shopping centers that include hypermarkets and other large grocery stores aims to create a food shortage. This is another siege tactic that the Russian military uses to deteriorate living conditions and force a surrender.
Imagery from Maxar Technologies shows the extent of damage in Mariupol as of 9 March 2022 (compilation by T-Intelligence)
Mariupol was under a limited ceasefire negotiated between Ukraine and Russia on Sunday to allow evacuations. However, Russia has breached the ceasefire by shelling the humanitarian corridors, stalling the evacuation in the process.
The collapse of Mariupol will enable Russia to link Crimea with the separatist territories in Donbas by land, which has likely been a Russian aim since the 2014 Donbas offensive. Back in 2014-2015, Mariupol represented the maximum point of advance of the Russian military during the Donbas offensive. Ukrainian forces managed to stop the Russian advance and keep Mariupol.
Russian control of Mariupol will also leave Ukraine without access to the Azov Sea, as Russia has already captured 99% of the coastline.
Russia has failed to break through Ukrainian defenses in Kiyv and Kharkiv, despite successive airborne and armored assaults backed by artillery, since 24 February 2022. The Ukrainian military has significantly…
Russia has failed to break through Ukrainian defenses in Kiyv and Kharkiv, despite successive airborne and armored assaults backed by artillery, since 24 February 2022. The Ukrainian military has significantly decelerated Russia’s offensive and brought it to a near standstill on most fronts. What Vladimir Putin expected to be a blitz is turning into a slow grind for the Russian military. Ukraine’s defenses prove robust, and the military’s willingness to fight is unshattered.
Military aid from NATO will provide much-needed replenishment for anti-tank, surface-to-air, and air-to-air missiles ahead of a likely beefed-up Russian assault.
Russia will likely also escalate violence, relax the rules of engagement, and increase the use of heavy artillery like thermobaric munition, cluster submunition, and ultimately, ballistic missiles. The objective will be to break the Ukrainian military’s and population’s will to resist.
1. The past 100 hours have shown that Russia’s campaign has been governed by overconfidence that Russian forces would move fast and seize key objectives, including Kiyv, and a severe underestimation of the Ukrainian military’s ability and will to fight. Moscow’s buoyancy racked up a hefty bill, which includes thousands of Russian soldiers killed in action and loss of military hardware such as aircraft, artillery, and armored vehicles. Grave symptoms of Russia’s misguided optimism are:
INABILITY TO ACCEPT FIERCE UKRAINIAN RESISTANCE
2. Russia’s biggest miscalculation was to doubt Ukraine’s ability and willingness to fight. Russian commanders have likely forecasted an immediate collapse of the Ukrainian military or a chain-surrendering of the units posted on the frontline, similar to Crimea in 2014, facilitating a quick advance on Kiyv. Besieging Kiyv, forcing the Zelensky administration out of office (even through assassination), and installing a pro-Russian government is undoubtedly the main objective of the Russian invasion.
3. Most Russian war plans seem to have been based on the assumption of weak resistance, which led to poor logistical planning, a “restrained” offensive counter-air (OCA), incomplete suppression of enemy air defense (SEAD), the inability to establish complete air superiority, and ultimately, failure to reach key objectives.
FAILURE TO SEIZE KIYV AND MAJOR POPULATION CENTERS
4. Four days into the invasion, Russia has not managed to seize and control any of Ukraine’s major population centers, including Kiyv.
KIYV: Ukrainian forces have heroically repelled multiple Russian charges on Kiyv. The Ukrainians fought off at least three major airborne assaults (two on Hostomel airfield, which was ultimately captured, and one on Vasylkiv airbase) and three to five mechanized and/or motorized operations. Russia’s assaults on Kiyv have exclusively come from the northwest as Russian troops have failed to surround the capital thus far. Ukraine’s victories resulted in tactical defeats and massive casualties for Russia’s tip-of-the-spear units, the special operations forces (SOFs), and airborne assault troopers.
CHERNIHIV: Despite several attempts, Russia did not manage to break through Ukrainian defenses at Chernihiv.
KHARKIV: Despite several attempts to encircle Ukraine’s second latest city, Russian forces have failed to besiege or establish a foothold in Kharkiv. Ukrainian defenses repelled all attacks and resisted multiple artillery strikes from across the border. The 1st Guards Tank Army (Western Military District), Russia’s most capable armored formation, is spearheading the Kharkiv operation.
The failed “thunder run” towards downtown Kharkiv by Russian light infantry on 27 February showcased a lack of imagination and quick solutions for breaking Ukraine’s local defenses.
KHERSON: Russian forces were unable to fully control and hold Kherson despite a small incursion.
RUSSIA DOES NOT HAVE AIR SUPERIORITY
5. Russia has failed to establish complete air superiority over Ukraine. Multiple social media videos from the past days have shown Ukrainian Su-25 attack aircraft, MiG-29 and Su-27 fighter jets, and Mi-24 utility helicopters engaged in operations against Russian forces. The Ukrainian Armed Forces recently released footage showing three separate strikes on Russian positions using Bayraktar TB-2 combat drones. News that NATO (likely Poland) has resupplied Ukraine with air-to-air missiles indicates that more Ukrainian fighter aircraft survived Russia’s pre-assault Offensive Counter Air (OCA) strike.
Insufficient OCA: While we are still reviewing satellite imagery, our preliminary assessment is that the vast majority of Ukrainian Air Force (UkAF) bases are still operational. As most runways are intact, flight operations can take place.
Craters and impact points are only visible on tarmacs, indicating that Russia’s missile strikes have damaged and disabled some aircraft. The strikes also destroyed fuel and ammunition storage facilities in annex sites.
Russia likely planned this outcome. As many analysts have pointed out, Russia probably expected to seize the airfields and use them immediately. Instead of destroying the runways, Russia preferred to render the UkAF fighter jets ineffective by leaving them without fuel and ammunition.
Nevertheless, this “restrained” OCA has boomeranged on the advancing forces who continue to face aerial bombardments from Ukrainian attack aircraft, helicopters, and drones.
Unsuccessful Suppression of Air Defenses: Amid continued reports of Ukrainian air defense activity, including the S-300 and Buk-M1, it is highly likely that Russia did not manage to suppress or destroy Ukraine’s defenses completely. These systems are highly mobile. Ukraine probably moved some systems to hideouts to survive “the first day of war.” It is also likely that Ukraine baited Russian missiles with dummy targets, even radar-emission-rich, to improve the survivability of its air defenses.
POOR LOGISTICAL PLANNING
6. Another key symptom of Russia’s overconfidence is the derelict logistical situation of its troops in Ukraine. There are reports that Russian soldiers lack fuel and food and therefore have to source resources locally. This does not come as a surprise, as the Ukrainian military has scored big hits on Russian supply lines, destroying scores of fuel trucks and utility vehicles lagging behind assault troops. In “blitz” offensives, the infantry pushes forward towards the objective, leaving the logistical units behind in a highly vulnerable position. If the logistical support units are destroyed, the assault becomes unsustainable despite significant territorial gains of the advancing force.
One iconic video shows a conversation between the crew of a stranded Russian armored personnel carrier that ran out of fuel and a Ukrainian citizen.
A priceless exchange of a brave Ukrainian citizen with Russian army stuck out of fuel. ENGLISH SUBTITLES.
Expecting a “blitz” offensive with a quick victory, Russian commanders possibly ignored the need to ensure a steady stream of supplies.
FRUSTRATION & ESCALATION: WHAT TO WATCH OUT FOR
NORTH-EAST AXIS OF ATTACK COULD SPELL DOOM FOR KIYV
7. A Russian breakthrough on the Chernihiv-Hulkhiv-Sumy frontline could mark the beginning of the end for Kiyv. If these forces are freed up and reach the capital, the Russian military could surround Kiyv. Thus far, the Ukrainian army has managed to keep the Russian advance from southeastern Belarus, Yelnya and Kursk, in check. However, this is an area of operations that require close attention
AVOID CITIES, RACE FOR KIYV
8. There are reports that Russian forces have been ordered to bypass regional cities and race towards Kiyv. A rush for Kiyv would leave the flanks and rear of the Russian columns extremely exposed to Ukrainian attacks, but the pay-off would be huge. A multi-axis convergence on the capital would very likely break the capital’s defenses. The presence of Russian troops beyond cities that they have not captured, such as Chernihiv and Kharkiv, are clear indicators of a rush for Kiyv.
9. Stopping the flow of ATGMs and MANPADs from NATO to Ukraine will become a priority for the Russian military in the coming days. Small teams of Russian Special Operations Forces (SOFs) will likely infiltrate to interdict Ukraine’s supply lines from Poland. They will recon Ukraine’s supply routes and storage and distribution hubs and pass on intelligence for air or artillery strikes. Russian SOFs could also provide terminal guidance for RuAF strikes, especially in the case of precision-guided munitions. It is also possible that Russian SOFs could take matters into their own hands and seek to destroy munition transports.
Renewed Russian missile attacks on Ukraine’s western airfields, or even attempts to shoot down cargo jets are likely also on the table, as a way to disrupt Ukraine’s logistical connection with NATO.
TROOP & VIOLENCE ESCALATION
10. As Russia becomes frustrated with the Ukrainian resistance, it will likely ease rules of engagements (ROE) and phase in more heavy artillery strikes on populated centers. In such a calculus, we would see widespread use of ballistic missiles (BMs), including the Iskander systems, which have been forward-positioned along Ukraine’s borders for weeks. Mounting evidence suggests that Russia has already launched BMs from Belarus, some of them impacting Zhytomyr airfield and Chernihiv.
11. Russia will likely allocate more forces to the offensive. Currently, only 50 to 70 percent of the troops amassed around Ukraine are engaged in the offensive. As more Russian troops from staging grounds in southern Belarus, Yelnya, Kursk, Voronezh-Belgorod, and Crimea cross the border, Russia will need to rebuild its reserve force. An indicator of this will come in the form of eyewitness videos from Russia showing new troop movements or mobilizations, as we have recently seen with the Chechens. A higher troop count (over 200,000 soldiers) combined with overwhelming artillery and missile strikes is likely Putin’s ultimate bet to break Ukraine’s will to fight.
In the early hours of 24 February 2022, Russia commenced a series of pre-assault operations to soften Ukrainian defenses ahead of an all-out, multi-axis invasion, which is now in progress….
In the early hours of 24 February 2022, Russia commenced a series of pre-assault operations to soften Ukrainian defenses ahead of an all-out, multi-axis invasion, which is now in progress.
This course of events was extensively threatcasted by the OSINT community weeks in advance, including us. Those familiar with our estimates from January 2022, see here, would have expected a Russian invasion and the subsequent operational and tactical developments.
DAWNBREAKER: PRE-ASSAULT OPERATIONS
Cyber attacks & Electronic Warfare (EW):
1. The opening salvos of Russia’s invasion were cybernetic and electronic and were initiated on 23 February 2022. Russia launched Distributed Denial of Service (DDos) attacks on the Ukrainian government, jammed military communications, and psychological operations against Ukrainian troops.
⚠️ Confirmed: #Ukraine‘s Ministry of Foreign Affairs, Ministry of Defense, Ministry of Internal Affairs, the Security Service of Ukraine and Cabinet of Ministers websites have just been impacted by network disruptions; the incident appears consistent with recent DDOS attacks 📉 pic.twitter.com/EVyy7mzZRr
Suppression/Destruction of Enemy Air Defences (S/DEAD)
3. In the dead of night, Russia launched land-attack cruise missiles (LACMs) and anti-radiation missiles (ARMs) at Ukrainian integrated air and missile defenses. They likely disabled several early warning, tracking, and engagement radars, rendering Ukraine’s sensors and SAM systems ineffective (S-300, Buk M-1). However, some might still be functional or serviceable.
Debris is consistent with Kh-31PD anti-radiation variant
4. Russia launched massive strikes against airbases to ground the Ukrainian Air Force (UkAF). Damaged runways prevent Ukrainian aircraft from taking off and landing. Follow-up salvos disabled the grounded aircraft and cleared facilities for occupation by airborne troops.
7. One Ukrainian Su-27 flew into Romanian airspace where it was intercepted by Romanian F-16s and forced to ground at Bacau Air Base. As per Romanian government accounts, the pilot’s homebase was destroyed and had nowhere else to land.
8. Russian LACMs also leveled command, control, and communication nodes (C3). These attacks aimed to separate the higher echelons from battlefield units, behead the leadership, and throw the military in disarray. This was another textbook pre-invasion tactic.
9. Many videos emerged online showing LACMs pounding ammunition depots and warehouses, resulting in massive secondary explosions. Attacks to bleed Ukraine’s logistical supply lines have occurred nationwide, including Lviv (near Poland), Ivano-Frankivsk (close to Romania), Melitopol, and Odesa.
10. Our previous T-Intelligence analysis anticipated this tactic to diminish Ukraine’s growing ATGM stockpile.
11. Shortly after the crack of dawn, the Russia commenced a multi-axis ground offensive, moving tanks and armored vehicles along select axis of attack.
Russian operational directions and screengrabs from select videos showing military attacks in Ukraine
12. As OCA was largely successful and grounded most of the UkAF’s extensive fighter fleet, the Russian Aerospace Forces (RuAF) could establish air superiority. Otherwise, we would not have seen a major helicopter assault on Kiyv and nearby airports. However, a video emerged showing a UkAF MiG-29 buzzing the skies of Kiyv and allegedly dogfighting an alleged Russian Su-35, which means that not all fighters are grounded or destroyed (update: a re-examination of the video concludes that both aircraft are Ukrainian).
13. Russian battalion tactical groups (BTGs) have advanced from nearly all operational directions:
Belarus (to Kiyv, the Pripyat area, Chernihiv)
14. Russian forces in Belarus crossed the border towards Chernihiv, seized the Chernobyl exclusion zone following a heavy armored battle with Ukrainian forces, and deployed a massive airborne assault on Kiyv.
Convoy of MT-LB’s, fire control vehicle and TOS-1 flamethrower MLRS, plus other vehicles reportedly at the Senkovka-Veselovka border crossing with Belarus pic.twitter.com/MqseHsP5LQ
15. Under the cover of rocket artillery, tank columns crossed into Ukraine and rapidly approached the country’s second-largest city, Kharkiv. The battle for Kharkiv is still raging on, with Russia facing losses. Intrusions have reportedly also occurred further north on the frontier near Sumy.
16. Recently reinforced by Russian troops, Luhansk and Donetsk separatists have launched a tandem assault across the demilitarized zone. Operational objectives are to capture Kramatorsk and Severodonetsk, and secure the rest of Donetsk and Luhansk regions. Splinter groups will likely then follow up to hit Ukrainian positions in Kharkiv from the rear, and separately, besiege Mariupol.
Crimea (to Kherson & Melitopol)
17. Russia made significant territorial gains north of Crimea, towards Kherson city and most adjacent areas. A separate line of the assault went eastwards and arrived at Melitopol. Beyond Melitopol, Russian forces aim to encircle Mariupol with Donbas formations.
The Ukrainian front in Kherson totally collapsed.
Russian troops reached the Dnepr and do not face any resistance.
I geolocated them 130 km inside Ukraine.
The Ukrainian army says the situation is “difficult”. Understatement of the year.
This is unbelievable. pic.twitter.com/0yExuFmjXA
18. An amphibious assault on Odesa is still expected but would likely come later to complete the pincer movement with troops advancing from Kherson.
Close Air Support (CAS)
19. Ka-52 attack helicopters, Su-25 attack aircraft, and a myriad of ground-based artillery provide overwhelming fires to the advancing columns. Russia’s successful OCA and subsequent air superiority enabled aerial CAS platforms. Without a permissive aerial environment, Su-25s and attack helicopters would have been easy targets for Ukrainian fighter jets.
20. Russian Airborne Forces aboard Mii-8 helicopters and escorted by attack helicopters have assaulted key areas around Kiyv. Russian paratroopers achieved a breakthrough at Hostomel airfield/Antonov International Airport, but lost three helicopters to ground to air fire in the process. Russia’s airborne assault seemed rushed, albeit speed is key to maintaining the initiative, and faced heavy resistance.
Securing these facilities is key to airlift tanks, personnel, and the necessary equipment to besiege Kiyv.
Confirmed by Ukrainian authorities. A large air assault operation with Mi-8 helicopters on Antonov International Airport in Hostomel. Interior Ministry says Russia has seized control. Very dangerous; it’s just 15 minutes west of the capital ring road. pic.twitter.com/JhlyVktVRC
21. Russian airborne units have lost Hostomel airfield after a strong counterattack from the Ukrainian military. If sustainable, the loss of Hostomel is a significant blow to Russia’s plans to quickly amass and encircle Kiyv before Ukrainian forces establish better defenses.
For reasons of operation security, we will not comment on Ukraine’s military movements. We urge OSINT analysts not to share videos or images of the Ukrainian Armed Forces.
KEY JUDGEMENTS I. The Russian military build-up around Ukraine is designed for combat operations and not a show of force (“bear scare”). Our estimates are based on the unprecedented scale…
I. The Russian military build-up around Ukraine is designed for combat operations and not a show of force (“bear scare”). Our estimates are based on the unprecedented scale of Russia’s military build-up, the force composition in terms of capabilities, credible logistics, and increased operations security.
II. President Putin’s intentions remain unclear, but a military operation against Ukraine is moderately likely. The hypothetical campaign will likely be punitive, target Kyiv or Kharkiv, and seek to install or facilitate the emergence of a Russian-friendly “salvation” government.
III. Moscow’s diplomatic campaign around the build-up serves the informational offensive against NATO. Russia does not seek a political settlement to the current tensions and is well aware that its maximalist demands are non-starters for the West. However, these political talking points serve to shift the blame for the current tensions on the so-called “NATO expansion.”
IV. Only the threat of massive economic sanctions can alter Russia’s war plans. Ironically, NATO’s most unreliable member, Germany, holds the biggest financial leverage against Russia. Ukraine’s growing stockpile of ATGMs will be critical to slow down an armored assault and impose costs on an aggressor but have no strategic value.
READY FOR COMBAT
1.Russia has amassed around 100,000 troops, organized in 50 to 60 Battalion Tactical Groups (BTGs*), in five areas bordering Ukraine. The mobilized force represents roughly 30% of Russia’s 168 BTGs. This is the largest Russian build-up in modern history, far exceeding the number of BTGs deployed to annex Crimea (approx. four) and subsequent offensives in Donbas (five to eight).
A substantial part of the BTGs deployed around Ukraine consist of equipment without personnel. However, Russian General Staff can deploy forces to man the equipment at a moment’s notice, especially using airlift capabilities (as recently demonstrated in Kazakhstan). In addition, a large portion of the troops has been permanently based near the Ukrainian border since 2021 or earlier.
*BTGs are temporary operational formations of infantry battalions and attached artillery, air defense, engineering, and logistics support units for combat operations, as part of motor rifle and tank brigades. Air assault units, special operations forces, and other echelons can also be attached to a BTG.
*Estimates on BTG posture: Ukrainian military intelligence estimates of 40 BTGs from late-November 2021 serve as a baseline layer (now dated and exceeded), followed by personal approximations in January, and most importantly, taking into account more precise calculations from Rochan Consulting (54 on 17 January 2022) and Michael Kofman, director of Russia Studies at CNA (55-60 on 15 January 2022).
Overview of Russian military build around Ukraine. Note that the map is slightly outdated and does not show the units recently amassed in southern Belarus. (source: New York Times)
2. Four out of five Russian military districts have provided units for the build-up, including four field armies from the Eastern Military District (EMD), which are heading towards Belarus for the first time. The level and scope of cross-theater deployments are out of the ordinary and represent a significant logistical strain on the Russian military.
3. Russia’s build-up continues to escalate in scope and complexity. Ongoing troop movements to reinforce established positions, deployments of advanced weapons capabilities like Iskander short-range ballistic missiles (SRBM), and opening a new front in southern Belarus underscores the continuity of the operation. US intelligence estimates that the Russian build-up will ultimately amount to 175,000 troops/100 BTGs.
4. The flow of logistical units and equipment to Ukraine’s border is the clearest indicator of a build-up with the intention of combat, apart from the unprecedented manpower involved. Eyewitness footage on social media has documented the westward movement of Russian fuel tankers, bridging/pontoon equipment, recovery trucks, transloaders, and other utility vehicles on railcars from late October to mid-December 2021.
5. Logistical movements have re-intensified between January 15-20, 2022, despite a slowdown in the previous month. Railcars now mostly service routes from Siberia, delivering EMD hardware and personnel, to southern Belarus. These transports can be subject to delays caused by bad weather, mechanical issues, or other obstacles that arise on long-term deployments.
6. Russia’s logistical capacity around Ukraine is difficult to estimate at this point. The most recent authoritative estimate comes from a U.S. government source (quoted by CNN on 3 December 2021): “current levels of equipment stationed in the area could supply frontline forces for seven to 10 days and other support units for as long as a month.” Russia’s current logistical capacity is now likely more extensive than in December.
7. Russia’s logistical build-up is likely incomplete and will certainly continue at least until February 10-20, when joint exercises will take place in Belarus. With no “Z-Day” in sight, troop movements and supplies will probably continue beyond February – if not to boost to sustain the Russian military capacity. A CITEAM social media analysis found that most soldiers are expected to be deployed for two to seven or even nine months.
While unnecessary for a show of force, logistics are a prerequisite for military operations. Tanks cannot move without fuel from tankers; soldiers cannot receive food and ammunition without utility trucks supplying the frontline; combat injuries must be treated in field hospitals.
EFFORTS TO CONCEAL
8. Unlike during previous “bear scares,” Russia has made significant efforts to conceal the troop movements and boost operations security (OPSEC). Countermeasures include nighttime movements, blacking out unit markings, covering equipment, disrupting online tracking methods (such as railcar databases), and dispersing staging areas in smaller formations. This behavior starkly contrasts the build-up in March and April 2021, when the Russian posturing was overt and demonstrative.
FIVE OPERATIONAL DIRECTIONS (OD)
9. Russia has positioned its forces along five axes of attacks, or operational directions (OD)*, around Ukraine: Belarus, Yelnya, Orlov-Voronezh, Don, and Crimea. The following is a short account** of Russian troop dispositions in the five ODs, their relevance, and possible objectives.
Map shows the Ukraine military intelligence assessment of possible Russian attacks paths (source: Ukrainian military/Military Times)
*axis of attack launched from a given staging area, as seen in a Ukrainian Military Intelligence map released in a Military Times interview November 2021.
**For an extensive and detailed overview of the Russian order of battle in these areas, please refer to Rochan Consulting’s Tracker, from which most of this data is drawn.
a. The latest and most important piece of the jigsaw puzzle assembled around Ukraine. OD Belarus brings Kiyv within striking distance of Iskander-M SRBMs. Due to its proximity to the capital (150-200 km), OD Belarus can serve as a springboard for an offensive on Kiyv.
b. Currently, there are seven to ten BTGs in Belarus, mainly from the EMD, according to Rochan Consulting. Russian infantry and mechanized units have been documented arriving in large numbers in Mazyr, Recyca, Gomel, Yelsk (18 km from UKR border), and the surroundings.
Russian troops have officially arrived in the Belarusian town of Yelsk, 18km from Ukraine. A local news outlet made a short story about it. pic.twitter.com/ZdprX1a8Th
c. Troop movements towards Belarus began sometime in early January and are escalating. A Su-35 squadron has left its homebase inKomsomolsk-on-Amur (near the Sea of Japan), and will soon touch down in Belarus. Two S-400 surface-to-air missile (SAM) systems will follow shortly. Iskander SRBMs are also reportedly joining the party.
a. The forces headquartered and amassed around Yelnya could support OD Belarus and OD Orlov-Voronezh with reinforcements or open a new axis of attack to stretch UKR forces thin in the north. Around four to eight BTGs are based in OD Yelnya, with many units assuming positions close to the tri-border with Belarus and Ukraine at Klintsy. With the influx of an Iskander battalion (approx. 24 missiles) from the 119th Missile Brigade, and various multiple rocket launcher systems (MRLS), OD Yelnya also packs firepower with range to strike Kiyv.
Russian military presence at a staging ground near Yelnya. Image captured on 19 January 2022 by Maxar Technologies.
b. Established during the initial build-up in March and April 2021, these forces pose a direct threat to Ukraine’s second-largest city, Kharkiv, and the adjacent areas. There are likely at least twelve BTGs concentrated between Orlov and Voronezh, and these forces have been kept at high readiness through drills simulating nighttime assault and artillery support.
Pogonovo training ground. Imagery captured on 16 January 2022 by Maxar Technologies
c. Pogonovo and Krynitsa training grounds are the epicenters of the manpower concentration in this OD. Since last year’s “bear scare,” Pogonovo has been exceptionally well documented via satellite imagery (see our analysis) and remains an area of primary concern (see Rochan Consulting’s GEOINT analysis). The forces and equipment at the two staging grounds augment the formidable 20th Combined Arms Army (CAA) headquartered in Voronezh.
d. In the past weeks, units in this OD have inched increasingly closer to Ukraine’s border. Satellite imagery from December 2021 shows an increase in military hardware in Valyuki/Soloti, just 15 km from the Ukrainian border. Similar activities have been noted in Baguchar (80 km), amounting to a worrying trend.
a. Over 15 BTGs inhabit the areas between Rostov-on-Don and Ndvocherkassk. Their potential role will be to rendezvous with Russian forces stationed in eastern Ukraine to strengthen local defenses or help mount an offensive in depth. Hypothetical offensive operations will likely seek a breakthrough in Mariupol followed by a march along the Azov coastline. Don OD could also eye the Dnieper river valley, especially in a joint operation with splinter formations from Orlov-Voronezh OD.
a. This OD could open no less than three axes of attacks on Ukraine’s coastline. An amphibious assault launched from Crimea’s western coast would target Odessa and the adjacent littoral. Once ashore, these forces could link up with the Operational Group of Russian Forces (OGRF) from the Transdnister breakaway republic coming from the west. The lower section of the Dnieper valley (North Crimean canal) is another realistic, although overstated, target. Together with Don OD, Crimea-based forces would likely also attempt a pincer movement on the Melitopol-Mariupol axis.
b. Russia has simulated almost all of these attack scenarios during the military build-up in March and April 2021, during which new BTGs assumed permanent stations in Crimea, bringing the total count to at least 12 BTGs. Back then, the main event was a major amphibious assault on the Opuk training range, which we documented in this analysis. Air and infantry assaults around Dzankhoi and other areas in northern Crimea were also noteworthy.
c. Naval movements are also underway, with a task force comprising of Baltic Fleet and North Fleet vessels (including three Ropucha-class landing ships) heading towards the Mediterranean Sea to link up with Pacific Fleet ships for joint exercises. There are fears that at least a part of the maritime task force will enter the Black Sea.
Russia deployed the largest naval and amphibious grouping to the Black Sea in April since the fall of the Soviet Union with 4 large landing ships from the Northern and Baltic Fleets. It appears they’re about to deploy even more this time. 675/https://t.co/9KTnPQJDoo
10. Russia’s intentions remain unclear, but we judge the likelihood of direct action high with a 55 to 60% confidence level. Our estimates are based on the build-up’s unprecedented scope and credible composition, including the multi-axis posturing and the unachievable, maximalist political demands of Russian diplomacy.
11. It is unknown how the hypothetical military operation will look. While the Russian military is positioned for a multi-axis assault, it will not necessarily follow the apparent blueprint. Russia might seek to activate only one OD, such as Belarus or Voronezh, a combination of them, or all. Attacks could be simultaneous or gradual and will fluctuate based on the situation on the ground.
12.The hypothetical campaign will likely be punitive, target Kyiv or Kharkiv, and seek to install or facilitate the emergence of a Russian-friendly “salvation” government. Such an operation would be akin to the 2008 Georgian campaign, where Russia did not seek to annex territory but to force the government into submission. Rob Lee put forward a similar hypothesis in an extensive article here.
13. There is also a high possibility (40 to 45%) that no military operation will occur, yet heightened tensions will persist. The build-up could proceed and even escalate, but hold out for months. As a result, more units will permanently or semi-permanently entrench near Ukraine, waiting to achieve strategic surprise later. The payoff could come even seven months into the future. Alternatively, a significant amount of forces could pack up and return to their home base at any given moment.
14. Russian President Vladimir Putin will make the final decision. While “Kremlinologists” have long tried to interpret the thoughts of Kremlin leadership, nobody knows Putin’s calculus. He has likely committed to one or several courses of action, hence the comprehensive preparation, but the final order has not been signed and issued.
FEARS OF IMPENDING UKRAINIAN OFFENSIVES IN DONBAS
15. The key driver of this build-up is the perceived threat of a Ukrainian offensive to recapture Donetsk and Luhansk and the increased anti-Russian narratives of the Zelensky administration. Past events (see below) might have forced Russia to consider that the current democratic order will not generate a pro-Russian government in Kiyv. Recapturing Donbas and pursuing NATO membership will remain a top priority of all upcoming cabinets.
a. THE DRONE STRIKE: On 26 October 2021, a Ukrainian Bayraktar TB-2 drone bombed a Russian artillery position in Luhansk. The artillery system had passed the withdrawal line of the Minsk agreement and shelled Ukrainian positions. This was the first Ukrainian airstrike on a Russian position and arguably Kiyv’s most hawkish action in years. Russia reacted by resuming and escalating the build-up of March to April 2021, leading to what we see today.
b. THE PERCEIVED UKRAINIAN BUILD UP: Between late 2020 and early 2021, a string of videos online apparently showed Ukrainian tanks on railcars rushing towards eastern Ukraine. Whether this was a build-up or just a rotation of the forces stationed near the frontline remains unclear. However, Russia decried the troop movements as preparation for an offensive in Donbas. In retaliation, Russia escalated the conflict in Donbas and initiated the build-up of March and April 2021.
c. ZELENSKY TURNS HAWKISH: Ukrainian President Zelensky initially adopted a de-escalatory agenda regarding Donbas and pursued peace talks with Russia. By 2020, it became apparent that Russia had no interest in entering negotiations with Ukraine until non-starter demands, such as Ukraine renouncing NATO membership and sovereignty over Donbas, were met. As Zelensky’s dovish strategy failed to bear fruit, his public approval started plummeting. As a result, he adopted a more hawkish demeanour, taking action against Russian-backed opposition, seeking to re-energize ties with NATO, and invigorating Ukrainian aspirations in Donbas. Russia took note of the change of tone and started viewing Zelensky as a problem.
16. Modernization and growing capabilities of the Ukrainian Armed Forces render Kyiv an increasingly potent adversary. Tactical assets like the Bayraktar drones and Javelin anti-tank guided missiles (ATGMs) cannot generate strategic advantages, but ballistic missiles and cruise missiles can – if stockpiled in high enough numbers. Ukraine is currently developing the Hrim SRBM (with covert funding from Saudi Arabia) and Neptune anti-ship cruise missiles. These two assets can pose a credible threat to Russian critical infrastructure, command and control centers, and population centers, raising the cost of aggression for Moscow. Other programs such as unit reform or NATO training and standardization will also improve Ukrainian combat effectiveness.
17. NATO Reconnaissance sorties over Ukraine keeping a watchful eye on nefarious Russian activity. Russian officials have publicly decried the constant sorties of NATO reconnaissance aircraft tracking their movements in Donbas and the Black Sea. American Global Hawk drones, P-8A Poseidons, various RC-135s and various other ISR aircraft patrol the region daily and could provide early warning of a Russian invasion and expose the movements.
Earlier today, ten ISR aircraft from multiple NATO members flew over the Baltics and Ukraine:
USN P-8A (PK18x)
US Army RC-12Xs (YANK01 & YANK03)
USAF RC-135W (JAKE11)
USAF E-8C (REDEYE6)
RAF P-8A (GURNY01)
RAF RC-135W (RRR7205)
Swedish S100D (SVF604)
Swedish S102B (SVF623)
18. Growing defense ties between Ukraine and individual NATO members. Similarly, Russia is unhappy with the maturing defense ties between Ukraine and various NATO members, especially the United Kingdom. Ukraine and the United Kingdom have signed a defense agreement in mid-2021, which was followed by a significant incident at sea involving the HMS Defender and a Russian naval task force (see our analysis on the topic). While Ukrainian NATO membership remains impossible at this point, Russia is taking note that individual NATO members are coming to Kiyv’s aid.
DIPLOMACY: THE INFORMATIONAL COMPONENT
19. Moscow’s diplomatic campaign around the build-up serves the informational offensive against NATO. Leveraging nonmilitary means, namely political and information warfare, is a tenet of the Russian General Staff’s approach to “new generation warfare.” Russia’s official demands include guarantees that Ukraine will never join NATO, the withdrawal of NATO troops from Romania and Bulgaria, the decommissioning of the Ballistic Missile Defense system in Deveselu (Romania), and others. Russia does not seek a political settlement to the current tensions and is well aware that its maximalist demands are non-starters for the West. However, these political talking points serve to shift the blame for the current tensions on the so-called “NATO expansion.”
20. Western interactions with Russia’s false demands played into the Kremlin’s hands. Imprisoned opposition leader Alexey Navalny has perhaps captured the situation best in a TIME interview: “Instead of ignoring this nonsense, the U.S. accepts Putin’s agenda and runs to organize some meetings. Just like a frightened schoolboy who’s been bullied by an upperclassman.” Western diplomats should have rejected this rhetoric and brought the conversation back to the reality on the ground – the 100,000 Russian troops positioned to swallow Ukraine.
MEASURES TO DISCOURAGE ATTACKS & PALLIATIVES FOR THE DAY AFTER
21. Only the threat of massive economic sanctions can alter Russia’s war plans. Ironically, NATO’s most unreliable member, Germany, holds the biggest financial leverage against Russia. Nothing would deter a Russian invasion more than a credible threat from Berlin to terminate the North Stream 2 project. Perhaps equally important would be a concerted effort to disconnect Russia from the SWIFT payment system. American and EU targeted sanctions on Russian oligarchs will not affect military plans.
22. Wholesale transfers of tactical military equipment to the Ukrainian Armed Forces are necessary palliatives but do not deter a Russian invasion. Ukraine received over 1,000 NLAW ATGMs from the United Kingdom in the past few days. The British NLAWs will significantly boost Ukraine’s ATGM inventory, consisting of around 400 Javelins received from the United States, first under Trump (2017; 2018), then Biden (2020; 2021). Estonia will also deliver an unknown number of Javelins while Latvia and and Lithuania will donated Stinger man-portable surface-to-air missile systems (MANPADs) to Ukraine, in the next days.
🇬🇧 передала #ЗСУ легкі протитанкові засоби
Це зміцнюватиме 🛡 спроможності України, а надані засоби будуть використані виключно з оборонною метою pic.twitter.com/ipGpqPfInG
Ukraine’s growing stockpile of ATGMs will be critical to slow down an armored assault and impose costs on an aggressor but have no strategic value. Russia has likely already devised tactics to mitigate the ATGM threat using long-range fires, drone-directed artillery, and airstrikes, drawing from lessons learned in Syria. Alternatively, sabotage behind enemy lines is another course of action that Russia could take – and has likely already taken – to compromise ammunition depots.
NATO states should continue delivering military aid to Ukraine. The care packages should consist exclusively of easy-to-use equipment which can be quickly absorbed by the Ukrainian military and not require extensive training or high maintenance.
editing by Gecko
This assessment was made using Open-Source Intelligence (OSINT) techniques and resources. Visit Knowmad OSINT to learn more about our online OSINT training.
Key Judgements Since its inception in 2014-2015, the Wagner group has expanded from a frontline contractor in Eastern Ukraine, to spearheading Russia’s foreign policy and private business objectives in Syria,…
Since its inception in 2014-2015, the Wagner group has expanded from a frontline contractor in Eastern Ukraine, to spearheading Russia’s foreign policy and private business objectives in Syria, Libya, the Central African Republic, and many other states. As Wagner’s reach is constantly expanding, our mapping project aims to filter through speculation and leverage open-source intelligence (OSINT) to track Wagner’s presence and activity worldwide.
The Wagner group, such as it is, does not exist as a traditional PMC but as an interconnected network of mercenary groups, semi-state forces, and corporations with links to the Kremlin. As a result, Wagner’s activities are very difficult to track and categorize.
If left unchecked, the Wagner group will very likely remain an effective and transient tool of the Russian security apparatus, combining aspects of state forces, private military companies, and paramilitaries. Wagner activities will likely continue to be equally focused on supporting Russian private business interests as foreign policy objectives.
DENIED AND DENIABLE: WAGNER GROUP
“Wagner Group” is an umbrella term that refers to the network of mercenary groups with ties to the Kremlin and controlled by Russian oligarch Yevgeny Prigozhin. The Wagner Group is used to advance Russia’s foreign policy objectives with a modicum of plausible deniability, as no such group formally exists and is denied by Russian officials.
Utilized in everything from disinformation to site protection and offensive combat operations, the Wagner Group escapes conventional definitions of Private Military Companies (PMC) and has become increasingly active globally.
Wagner PMC is known to operate under different names and structures, often related to mining, or military training, further obscuring the group’s activities. Existing literature focuses on the debates over Wagner’s functionality, goals, history, and even its very existence. However, limited attention has been directed towards the breadth of the network’s global activities. Herein we identify the locations of Wagner activity worldwide based on open-source reporting and assess the likelihood that Wagner is indeed active in each country.
A few things to understand before discussing the so-called Wagner group’s activities worldwide:
Due to the vague nature of the Wagner network and often imprecise and conflicting online reporting, much of the group’s activity cannot be identified with 100% certainty. Here we have opted to categorize Wagner activity as: Confirmed, Likely, Possible, and Unlikely.
It is important to note that beyond PMC Wagner, several other Russian PMCs remain active. It is possible to misidentify these PMCs as Wagner, especially with vague and unverified reports.
ACTIVITY LOG: TRACKING WAGNER’S GLOBAL REACH
Like any PMC or military entity, Wagner trains its contractors before departing on missions. Supported by Russian military and intelligence personnel, Wagner conducts training at two locations attached to the 10th Special Mission Brigade of GRU Spetsnaz in Mol’kino, Krasnodar region, Russia. These facilities feature airborne training and obstacle courses, weapons and munitions storage buildings, and barracks, among others.
Area view of military facilities near Mol’kino as first identified by CSIS (base imagery: Maxar Technologies)
Presumed Wagner training facility as first identified by CSIS (base image: Maxar Technologies)
Russia’s invasion of Ukraine provided the impetus for the creation of the Wagner group. Wagner mercenaries were instrumental in numerous battles throughout the conflict, notably in Crimea and later the Donbas region. Donbas war veterans formed the foundation of Wagner’s ranks, and the group continues to recruit from Russian-occupied eastern Ukraine.
Estimates put the number of Wagner operators in Ukraine anywhere from 2,500 to 5,000 at their peak, operating in support, intelligence, and direct combat roles. Wagner mercenaries were pivotal in the battles for Luhansk airport and in the seizure of the strategic town of Debaltseve in Donetsk oblast.
Activity Status: Confirmed – Limited continued presence
Wagner has been active in the Syrian civil war in support of President Al-Assad’s government since October 2015. Taking part in numerous battles in key roles, Wagner has been able to win a stake in the country’s energy industry for companies linked to Prigozhin and the Kremlin.
Estimates place the number of Wagner operatives as high as 2000 at different points in the Syrian civil war. Wagner also involved in the training of various Syrian millitias groups loyal to Bashar al-Assad, and Palestinian militias. By 2017, Wagner had already played a key role in recapturing parts of Deir ez-Zor province. In February 2018, Wagner contractors alongside Iranian-backed militias and Syria army units, attempted to capture an oil field from the U.S-backed Syrian Democratic Forces (SDF). Swift U.S. airstrikes obliterated the Wagner attack, resulting in massive casualties for the Russian mercenaries (some estimate over 100 Wagner KIA).
Wagner maintains a presence at the strategically important Tiyas airfield (T-4) and in central and eastern Syria. In addition to supporting Russian foreign policy goals, Syria served as an important proving ground for the use of Wagner, leading to the PMC’s global deployment.
Activity Status:Confirmed – Limited continued presence.
Numbering in the thousands, Wagner mercenaries have been omnipresent in the Libyan conflict since 2015. Wagner operatives served in critical frontline roles supporting General Haftar’s Libyan National Army (LNA) against the UN-recognized Government of National Accord.
Wagner contractors trained LNA forces, engaged in combat operations, including the assault on Tripoli, and secured the LNA’s critical infrastructure (oil refineries and the ports of Tobruk, Derna, Benghazi, and Sirte). Wagner is also notorious for executing prisoners and placing mines and booby-traps in civilian areas.
Presumed Wagner contractors in Libya
Wagner affiliated personnel also pilot Russian fighter aircraft (e.g. Su-24 “Fencer”) and operate advanced air defense systems (Patnsir S-1/SA-22) on behalf of the LNA. Wagner infantry in Libya are equipped with utility trucks mine-resistant, ambush protected vehicles.The east Libyan al-Kahdim airfield is likely Wagner’s headquarters in the country.
US AFRICOM GEOINT shows Wagner aircraft and anti-air systems displayed at Al-Khadim airfield in eastern Libya
USAFRICOM GEOINT shows Wagner infantry near Sirte
The group continues to be engaged in the Libyan Civil War despite ceasefire agreements necessitating the removal of foreign fighters.
Activity status: Confirmed – Limited continued presence.
Two years into the bloody ISIS-linked insurgency in Mozambique’s northern region of Cabo Delgado, the government reached an agreement with Wagner to combat the insurgents in exchange for a stake in the country’s natural resource industries. Wagner commenced combat operations in Mozambique in October 2019. After initial success Wagner hit a wall and sustained notable casualties, leading to Wagner deciding to pull out of the agreement. Wagner was later replaced by Dyck Advisory Group (DAG).
Activity status: Confirmed – No longer present.
Central African Republic:
In early 2018 reports highlighted that Russia had sent Wagner trainers to the CAR to assist in the government’s fight against rebel elements. Despite the fact that the Wagner operatives were brought in for training, SOCMINT evidence suggests that the contractors have been involved in combat and human rights abuses. Wagner group affiliates/fronts “Lobaye Invest” and “Sewa Security” have secured a stake in the country’s diamond and gold mining industries in exchange for kinetic services.
Satellite imagery shows increased use of the group’s reported base of operations, Berengo Palace. Located southwest of the capital of Bangui, satellite imagery highlights increased traffic and what appears to be the use of an airstrip.
GEOINT: Vagner PMC barracks near Bangui (Analysis by T-Intelligence; imagery courtesy of Planet Inc.)
Operating under the “SEWA Security” banner or with no markings at all, Wagner has also provided VIP protection to CAR President Touadera.
A member of the close protection unit for Central African republic President Touadera, composed by Russian private security company operatives from Sewa Security, are seen in Berengo on August 4, 2018.(Photo by FLORENT VERGNES / AFP via Getty Images)
To learn more about Wagner activities in CAR, read our early report on Wagner’s growing presence, and our analysis of Russia’s troop surge ahead of 2021 CAR presidential elections.
Activity status: Confirmed – Growing presence.
Reports from 2017 indicate that Wagner mercenaries had been redeployed from Ukraine and Syria to support President Omar al-Bashir’s military with training and aid in suppressing demonstrations. Wagner-affiliated companies “Meroe Gold” and “M Invest” search for gold in the country with permission from al-Bashir’s government. Wagner’s presence in Sudan also reinforces Russia’s geopolitical position with a significant presence along the coast of the Red Sea and provides a supply line to the group’s operations in CAR. The Kremlin confirmed in 2019 that “Russian companies” are training the Sudanese army.
Wagner provided security detail to the political strategists hired by Prigozhin to assist the Madagascarian presidential election in 2018. Prigozhin received a contract to run an existing chromite mine in Madagascar in exchange for electoral assistance and interference. In April of the same year, reports suggest that these same Wagner contractors are being used to protect Prigozhin’s exploitation projects.
Activity status: Confirmed – Very limited continued presence.
Wagner contractors were brought in to assist embattled President Maduro in the face of political and social opposition in 2019. Reports suggest that Wagner contractors assisted in providing security for Maduro and his administration, as well as local Russian business interests. In 2019 there were reportedly 400 Russian mercenaries in Venezuela.
Wagner’s tasks beyond simple security roles included recruiting informants and helping to train Maduro-backed militias. Wagner’s presence is heavily tied to Russian geopolitical and economic interests in the country. In 2020, Rosneft, the largest Russian oil company in Venezuela, sold all its assets to an unnamed company owned by the Russian government, further solidifying Moscow’s interests.
Activity status: Confirmed – Limited continued presence.
Pre-Wagner affiliate Moran Security Group was known to be active in security roles in the shipping industry. Moran contractors were arrested at the port of Lagos in October 2012 for trafficking weapons. However, after Moscow’s involvement, the men were released.
Moran Security Group created the Slavonic Corps to branch away from its traditional security roles, which later morphed into the first iteration of the Wagner Group.
Recently reports have emerged that Prigozhin has been spotted in Lagos meeting with the Nigerian government and military officials, including with Nigerian Army Chief of Staff Farouk Yaha, in 2021. Prigozhin’s alleged meeting in Lagos coincides with a Gulfstream G550 flight to Nigera, namely P4-BAR – an aircraft associated with Wagner.
LNA/Haftar related Sonnig Jet Gulfstream 550 P4-BAR continued from Barcelona, Spain to Lagos, Nigeria, where it landed about 1800hrs UTC 22Jun2021 pic.twitter.com/hSx0L6tdEI
The meetings are likely connected with the fight against ISIS-affiliate Boko Haram in northern Nigeria.
Activity status: Possible – Discussions about bringing in the Wagner group appear to be underway, although Nigeria has made noted use of more traditional PMCs.
Wagner’s well-documented activity in CAR and Libya has led to speculation that Russian mercenaries have also penetrated neighboring Chad. Further reports suggest that Wagner has assisted in arming and training rebel groups in northern Chad in 2016. Rebel incursions lead to the death of Chadian President Idriss Deby Into.
Wagner-linked activities in Chad will likely intensify due to the group’s heavy presence in Libya and Russia’s growing interest in Africa.
Activity status: Likely – Contemporary reports of Wagner indirect influence coupled with Russian interest in the region suggest likely further activity in Chad.
Amid the political upheaval in Cuba, OSINT enthusiasts have tracked flights and a freighter previously associated with the Wagner group to the country. Given Moscow’s traditional relationship with Cuba, the state of upheaval, and Wagner’s noted presence in Venezuela, we may see Wagner’s arrival in the coming weeks or months.
We might have our answer, lads and ladies.
Note well the falsified AIS comment, as it was aberrant AIS signals that first caught my attention with this ship.
Whatever it may be broadcasting, it’s been “dark” just offshore at Mariel, Cuba for days.
Activity status: Likely – Though not currently active, Wagner personnel will likely arrive in the country.
While there are unverified reports of Wagner operatives arriving in Mali to fight the ISIS-linked insurgency, recent reports highlight ongoing negotiations for Wagner involvement in Mali. Russian foreign minister Sergei Lavrov further corroborates these reports by stating that Mali’s government has asked for “Russian PMC” assistance – a clear nod to Wagner.
Activity status: Likely – discussions are ongoing.
United Arab Emirates
The US intelligence community received reports in the summer of 2020 that provided links between the UAE and Wagner mercenaries active in Libya. As the UAE makes noted use of foreign fighters it is unsurprising to see the UAE turning to foreign mercenaries for foreign policy objectives. This provides an interesting precedent for both the UAE and Wagner.
Activity Status: Likely – Indirectly, evidence suggests the UAE is involved financially with the Wagner network.
Sightings of Prigozhin-associated flights and multiple news reports indicate a nascent Wagner presence in the country. Furthermore, a report suggests that some 200 Wagner operatives protect Russian intelligence officials at the Pico Basile Island spy base.
Latest information indicate that Equatorial Guinea had planned to involve Wagner in providing security in the country, but failed to reach a deal as it also wanted possible assistance in a coup against the incumbent President.
Activity status: Possible – Numerous unverified reports naming Guinea as a state where Wagner has influence. However, the lack of evidence or corroborating reports makes it unclear.
A Russian training center exists in Nicaragua since 2013, hundreds of Russian military personnel were sent to the country for “joint military exercises,” “humanitarian and military operations training,” and “anti-drug trafficking.” However, reports suggest that these “instructors” played a significant role in cracking down on anti-government protests.
The Russian military personnel are not thought to be affiliated directly with the Wagner group at this time. However, as Russia continues to rely on relationships with Venezuela, Cuba, and Nicaragua for a geopolitical foothold in the region, the Kremlin might insert Wagner in the country, if not already.
Activity status: Unconfirmed but possible – No explicit link identified, but numerous linkages have been highlighted. Nicaragua’s operational environment is optimal for Wagner activity.
No direct involvement of Wagner or Wagner affiliates has been noted in Iraq at this time.The Wagner group has previously been highly active in eastern Syria near key Iraq border crossings but there is no indication that Wagner undertook operations across the frontier.
Other Russian PMCs, including the Antiterror-Orel Group and the Moran group, linked to Wagner’s emergence, had previously operated in Iraq.
Activity status:Unlikely – Wagner might emerge in Iraq if the operational environment becomes more permissive due to a US/NATO withdrawal.
Nagorno-Karabakh Region (NKR):
Chatter emerged from forums and social media accounts associated with Wagner contractors insinuating that the group was operating in the conflict, these claims were eventually disproven by Bellingcat.
Displeased with Armenian PM Pashynian, Russia has been unusually detached from the flare-up in NKR, and only stepped in after the formal conclusion of hostilities in December 2020. If secretly deployed, it is possible that Wagner mercenaries only entered NKR as part of Russia’s “peacekeeping force.”
Activity status: Unknown
In July 2020, before the country’s presidential election, Belarussian authorities arrested 33 Wagner-linked contractors on suspicion of plotting terrorist attacks to destabilize the elections. Reports later came to light that the men were members of a PMC lured to Belarus through a joint operation by Ukrainian and US intelligence services intended to arrest members of the Wagner group active in the war in eastern Ukraine – former Ukrainian president Petro Poroshenko seemingly confirms the information.
Activity status: Unlikely – Wagner is extremely unlikely to be active in Belarus, more likely to be in transit to Libya, Sudan, CAR or elsewhere.
Russia and Tanzania signed an agreement in 2016 for joint military training at Russian facilities. While Wagner often fills these roles for the Kremlin, no evidence suggests they are active in Tanzania at this time. Previous activity along Tanzania’s southern border with Mozambique is not thought to have spilled over into the country.
Activity Status: Unlikely – Russian military activity does not always translate to Wagner presence, especially when overt agreements are made between the state.
There is no evidence to suggest a Wagner presence in South Africa; however Prigozhin-linked political strategists have assisted parties involved in the 2019 presidential election.
Activity status: Unlikely –The presence of numerous South African-based PMCs means mercenary activity is unlikely. Though Prigozhin-linked political strategists are very likely to maintain a presence.
Inconclusive Reports of Wagner Activity:
The following highlights inconclusive reports of Wagner activity, due to lack of evidence or corroborating reports.
Eswatini: Unverified reports suggest Wagner maintains a presence in the country and has trained Ewatini’s troops on new weapons systems.
Rwanda: Rwandan troops fought against Rebels in CAR as part of a bilateral agreement alongside Wagner elements.
Yemen: Rumors and social media reports indicate that a “Russian PMC” is active in the Yemeni Civil War. However, there is no credible report naming Wagner. Wagner-trained Sudanese militias have, however, deployed and fought in Yemen.
Zimbabwe: Nondescript reports have claimed that Wagner maintains an office in the country. Additionally, there have been claims that President Emmerson Mnangagwa’s 2018 election campaign was assisted by Russian political advisors associated with Wagner.
END NOTE: This tracker will be periodically updated as new open-source information emerge relating to Wagner activity.
by Matt Sutherland
This assessment was made using Open-Source Intelligence (OSINT) techniques and resources. Visit Knowmad OSINT to learn more about our online OSINT training.
Last week, the Black Sea became the latest theatre upon which tensions flared between the United Kingdom and Russia. On June 23, the British Royal Navy’s Type-45 HMS Defender entered…
Last week, the Black Sea became the latest theatre upon which tensions flared between the United Kingdom and Russia. On June 23, the British Royal Navy’s Type-45 HMS Defender entered contested waters off the Crimean Peninsula while sailing from Odessa (Ukraine) to Batumi (Georgia). As expected, Russia reacted aggressively, sending fighter jets and warships to taunt the Defender.
Unpicking these events proved difficult at first, given inconsistent reports from both the Russian and British militaries. However, nearly one week on, the fog of uncertainty has somewhat lifted, and the discovery of classified Ministry of Defence (MoD) documents at a bus stop in Kent (England) on June 27 has established a broader picture. The incident is part of a geopolitical contest in the region that has simmered for weeks.
Russia opened with a bang. On June 23, Russian media reported that the HMS Defender had entered Russian-controlled waters, and Russian forces had subsequently fired warning shots and dropped bombs in the destroyer’s pathway. Initially, many media outlets speculated that Russia was making baseless accusations and blowing events out of proportion.
The MoD downplayed the severity of the events. According to the MoD, the HMS Defender was “conducting innocent passage” and was not the target of Russia’s warning shots. The MoD’s rather bland coverage of events was at odds with reports from BBC Defence correspondent Johnathan Beale, who was on the Defender during the incident. According to Beale, the crew of the Defender took battle stations as Russian warships shadowed the British vessel and issued threats. BBC audio provides evidence that jets could clearly be heard overhead. Beale also mentions artillery shots from afar.
The HMS Defender entered Russian-claimed waters by two nautical miles and was prepared for some degree of confrontation.However, the Royal Navy transited the area using an internationally recognized shipping lane. The international community does not recognize Russia’s claim over Crimea or the adjacent waters. De jure, Crimean watersstill belong to Ukraine.
AIS data shows that HMS Defender was at it’s closest around 10 nautical miles (18.5km/11.5mi) from the Crimean coast. The UN state that territorial waters can be up to 12 nautical miles. This would put HMS Defender 2 nautical miles or 3.7km inside ‘Russian’ waters around Crimea. pic.twitter.com/nLUZ96Qs04
The incident was a tester for how Russia would react to a NATO sail through. The MoD’s classified documents left behind a bus stop in Kent (England) corroborate this assessment. The papers highlight route options for the HMS Defender and estimate Russian reactions to the proposed routes. The timing of the (literal) unearthing of these documents in the face of Russian rhetoric points to a likely composed leak to set out the motivations behind the Defender’s movements. Without officially setting the record straight, the MoD has proven a point.
Classified map of shows HMS Defender’s route options from Odessa to Batumi (source: BBC News)
The HMS Defender’s controversial voyage aimed to strengthen the British-Ukrainian alliance. In plotting a course through what it, and most of the world, deems internationally recognized Ukrainian waters, London rejects Russia’s claims over Crimea. Incidentally, on the day of the skirmish, the UK issued a press release stating that the UK and Ukraine have signed an accord to boost Ukrainian naval capabilities. Part of the agreement is the commitment to building a naval base in the Black Sea, which will serve as the primary base for Ukraine’s fleet.
Moscow was probably aware of the Defender’s plans tosail through Russian-claimed waters and responded with a disinformation campaign. Before the incident, on June 18, Russia falsified the tracking data of the Defender and another NATO warship. The ‘spoofed’ automatic identification system (AIS) data put the ships within two nautical miles of Sevastopol. However, port camera footage confirmed that both warships were still docked in Odessa.
Russia pulled an identical move on another ship, the USS Ross, on June 29. Spoofed AIS data falsely showed that the USS Ross was nearing Crimea, when in fact, the American vessel was also still ported in Odessa.
AIS (Automated Identification System) tracks which appear to show USS Ross ((DDG-71) off Crimea right now appear to be falsified. A live webcam in Odessa shows her berthed there as expected.#OSINTpic.twitter.com/3E82eikFTs
The incident was a preamble to the Sea Breeze 21 multinational exercise this week. Led by the US and Ukraine and encompassing 30 other states, this year’s edition is the largest in the history of Sea Breeze. Not long after Sea Breeze 21 kicked off, the Netherlands’ MoD reported that Russian jets had harassed the Dutch HNLMS Evertsen frigate in international waters. Russia will very likely continue to rattle the sabers in protest of the multinational drill.
Armed Russian military jets caused a dangerous situation in the Black Sea near HNLMS Evertsen last Thursday. The aircraft repeatedly flew dangerously low over and close to the ship and carried out mock attacks. HNLMS Evertsen was in international waters during these harassments. pic.twitter.com/fcY1nH392V
Further escalations between the UK and Russia in the Black Sea have to be expected. British-Russian relations are at a low due to the Novichok poisoning of the Skripals in Salisbury in 2018. As the UK is redefining its role in the post-Brexit world, London is eager to project itself as a solid military force supporting Ukraine. Furthermore, the recent events underscore that the UK is willing to dabble in the evolving ‘grey zone’ of information warfare. Bydownplaying the events of June 23 and then setting the record straight through the “loss” of classified documents, London plays fast and loose with the truth akin to, but not as versed as the dis/information warriors in Moscow.
Type on the field below and hit Enter/Return to search
Privacy & Cookies Policy
We also use third party advertisements on T-Intelligence to support our site. Some of these advertisers may use technology such as cookies and web beacons when they advertise on our site, which will also send these advertisers (such as Google through the Google AdSense program) information including your IP address, your ISP , the browser you used to visit our site, and in some cases, whether you have Flash installed. This is generally used for geotargeting purposes (showing New York real estate ads to someone in New York, for example) or showing certain ads based on specific sites visited (such as showing cooking ads to someone who frequents cooking sites).
We also use third party advertisements on T-Intelligence to support our site. Some of these advertisers may use technology such as cookies and web beacons when they advertise on our site, which will also send these advertisers (such as Google through the Google AdSense program) information including your IP address, your ISP , the browser you used to visit our site, and in some cases, whether you have Flash installed. This is generally used for geotargeting purposes (showing New York real estate ads to someone in New York, for example) or showing certain ads based on specific sites visited (such as showing cooking ads to someone who frequents cooking sites).
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.