Ukrainian Hackers Extracted Data from Over 2,400 Starlink Terminals Belonging to Invaders Using Fake Chatbots

Ukrainian hackers from the 256th Cyber Assault Division conducted a special operation to detect Starlink terminals used by Russian invaders.

They worked together with the InformNapalm intelligence community and the MILITANT Telegram channel.

To do this, they created a network of fake channels and bots that offered Starlink activation services for a fee. The main goal of the initiative was to identify the means of communication the enemy was using to circumvent existing restrictions.

In one week of operation, the network collected 2,420 data packets on enemy terminals. The information obtained contains the exact coordinates of enemy positions, allowing the Defense Forces to identify locations where personnel and equipment are concentrated around operational equipment.

In addition to technical data, activists recorded 31 requests from individuals seeking to become intermediaries or “drops” to activate devices. All information about potential traitors and collaborators was forwarded to representatives of Ukrainian law enforcement agencies for processing.

The financial result of the operation was the collection of $5,870 in payments from Russian military personnel. The organizers plan to use funds obtained from the enemy to cover the Ukrainian Defense Forces’ current needs.

Detailed information about the detected terminals was forwarded to volunteer Serhii Sternenko. This will allow the equipment to be blocked in the occupied territories. The scheme became ineffective after other communities began generating similar chatbots in large numbers.