Ukraine Exposes Russian-Iranian Intelligence Sharing for Military Strikes
Ukraine has publicly accused Russia of providing Iran with sophisticated cyber intelligence and detailed satellite imagery to enhance the precision of military base attacks across the Middle East. According to a comprehensive Ukrainian intelligence assessment reviewed by Reuters, this covert collaboration represents a significant escalation in regional tensions and offers the most detailed insight yet into Russia's support for Iran following the Israel and US assault on 28 February.
Satellite Surveillance Operations Detailed
The undated Ukrainian assessment reveals that Russian satellites conducted at least 24 detailed surveys of military facilities and critical infrastructure across 11 Middle Eastern countries between 21 and 31 March. These operations focused on 46 specific "objects," including US and allied military bases, airports, and oil fields. A clear pattern emerged where bases surveyed by Russian satellites were subsequently targeted by Iranian ballistic missiles and drones within days.
This intelligence has been corroborated by both a Western military source and a separate regional security source, who confirmed intense Russian satellite activity in the region and the subsequent sharing of imagery with Iranian authorities. The assessment highlights that nine surveys specifically covered parts of Saudi Arabia, with five focused on the King Khalid Military City near Hafar Al-Batin, apparently to locate elements of the US-made THAAD air defence system.
Geographic Scope of Surveillance
The surveillance operations extended across multiple countries, with areas of Turkey, Jordan, Kuwait, and the United Arab Emirates each surveyed twice. Israel, Qatar, Iraq, Bahrain, and Naval Support Facility Diego Garcia were each covered once. An emerging trend noted in the assessment is Russian satellites actively surveying the Strait of Hormuz, a vital waterway for global oil and LNG flows where Iran has imposed restrictions on vessel movements.
US space-tracking firm Kayhan Space analyzed orbital data indicating Russian satellites were repeatedly over the Gulf region during the late-March period, including those capable of Earth observation, reconnaissance, imaging, or surveillance. While overhead activity doesn't confirm imagery collection, the company suggested Russian satellite operations may have been more extensive than detailed in the Ukrainian assessment.
Specific Incident: Prince Sultan Air Base Attack
The regional security source confirmed a specific incident detailed in the Ukrainian assessment that was disclosed by Ukrainian President Volodymyr Zelenskiy last week. In this incident, a Russian satellite captured imagery of Prince Sultan Air Base in Saudi Arabia days before Iran struck the facility on 27 March, damaging a sophisticated US E-3 Sentry AWACS aircraft. The same Russian satellite passed over the site again on 28 March to assess the impact of the strike.
Deepening Military Partnership
Russia and Iran have significantly strengthened military ties since Russian President Vladimir Putin ordered the full-scale invasion of Ukraine in February 2022. Ukraine and Western nations allege Iran provided long-range Shahed attack drones to Russia, which were used against Ukrainian targets, while Russia developed more sophisticated variants. Iran denies supplying weapons for use in Ukraine.
Putin and Iranian President Masoud Pezeshkian signed a Treaty on Comprehensive Strategic Partnership in January last year. Article Four of the treaty explicitly states that "in order to strengthen national security and counter common threats, the intelligence and security services of the Contracting Parties exchange information and experience."
Cyber Operations Collaboration
The Ukrainian intelligence assessment and regional security source indicate Russia is also providing assistance to Iran in the cyber domain. Since late February, Iranian-controlled hacking groups have intensified operations targeting critical infrastructure and telecommunications companies in the Gulf region.
The assessment notes collaboration between Russian hacker groups "Z-Pentest Alliance," "NoName057(16)," and "DDoSia Project" with Iran's "Handala Hack" group via Telegram. For instance, last month, groups including Handala Hack published warnings about attacks on Israeli energy companies' information systems, while Russian groups simultaneously published access credentials to control systems at critical infrastructure facilities in Israel.
Iranian hacker groups have employed techniques suggesting they obtained them from Russian military intelligence hackers. For example, groups "Homeland Justice" (UAC-0074) and "Karmabelow80" used ProfitServer, a Russian VPS provider from Chelyabinsk, to register domains for their operations.
International Response and Denials
White House spokeswoman Olivia Wales stated that no external support for Iran from any country was affecting US operational success. The Iranian foreign ministry had no immediate comment, while Russia's defence ministry, which invaded Ukraine four years ago, did not respond to requests for comment.
European leaders pressed US Secretary of State Marco Rubio on the issue at a G7 meeting last month. Two diplomats reported that Rubio had not responded to the accusations, though he has publicly dismissed Russian aid to Iran as insignificant.
The Ukrainian assessment concludes that the exchange of satellite imagery is organized through a permanent communications channel used by Russia and Iran, potentially facilitated by Russian military intelligence officers stationed in Tehran.
