256 Cyber Assault Division

[256 Cyber Assault Division @256CyberAssault]

📡 You’ve probably seen this story making the rounds online: russian soldiers are trying to activate their Starlink terminals by finding Ukrainian citizens willing, for 30 shekels, to register them in their own name.

No surprise there: the enemy’s abrupt switch from reliable “capitalist” connectivity to domestic low-tech workarounds has seriously degraded their communications – disrupting coordination and putting a dent in assaults and drone activity across the frontlines.

💡Knowing how desperately russians will hunt for any way to bring Elon’s terminal back online –and the risks resumed comms creates for the Ukrainian defenders – we, together with InformNapalm and MILITANT, decided to help. We did so by creating a network of channels and bots that appeared to offer activation services for a fee.

In one week, we received:
📌 2,420 submissions with enemy Starlink details and precise geolocations;
📌 31 messages from would-be collaborators eager to act as registered holder for activation;
📌 $6,000 in “donations” from russian troops who were frantically looking for a fix to their comms problem.

Bottom line:
📌 Information on enemy terminals was passed to Serhiy Sternenko so they can be permanently neutralized;
📌 Data on would-be collaborators is already being processed by the competent Ukrainian authorities;
📌 The shekels we “farmed” off the enemy will cover several urgent fundraisers for Ukraine’s Defense Forces.

[Dallas Analytics @dallas_analytic]

🚨Russia declared the RS-28 Sarmat – its newest nuclear-armed ICBM – "on combat duty" in 2023. Internal defence-industry files obtained by Dallas Analytics tell a different story.
A strategic weapon called operational faster than its own factories could document, price or deliver it – by a Russian state that has shut off every external means of verifying the claim.
Sarmat's fielding is the story of a strategic programme defeated not by sanctions or engineering, but by its own bureaucracy.
🔍 Full investigation: https://t.co/r1mpiuRdpL

[256 Cyber Assault Division @256CyberAssault]

This article is also available in:
Polski:
https://t.co/QLAkX0LKJE
Українська:
https://t.co/47qejQbapS
Русский:
https://t.co/bC1KS2ABdn

[256 Cyber Assault Division @256CyberAssault]

Kremlin’s ‘reconstruction’ of Mariupol is a scheme of housing expropriation, money laundering and a cover-up of its own war crimes. Moscow exports this “reconstruction” narrative through Pravda Polska, Wolne Media and Myśl Polska to EU.
Click to learn more.

https://t.co/eQKgCgsyJWʼ

[Dallas Analytics @dallas_analytic]

🚀 Confidential Documents Expose Why Putin’s 'Oreshnik' Flies Blind
Dallas Analytics reveals a critical vulnerability within the Soviet-designed GU-503 gyro unit inside the 'Oreshnik' guidance mechanism, causing the platform to deviate by tens of kilometres from its intended targets.
Consumed by political optics after the November 2024 Dnipro strike, Vladimir Putin ordered four additional missiles for 2025. To meet this rigid timeline, Russian manufacturing facilities completely bypassed standard quality-assurance protocols to avoid delaying the Kremlin's schedule.
✉��� Internal correspondence from the Michurinsk Plant 'Progress' reveals that it has completely lost the specialised calibration technology and cannot verify the gyroscope's precision metrics prior to final assembly. This manufacturing failure directly explains why subsequent Oreshnik missiles are erratically striking civilian garage cooperatives instead of assigned military targets.
🔍 Full investigation: https://t.co/GNLzPuqPPu
We have also expanded the list of our channels – you can now follow Dallas Analytics on Substack, Threads, LinkedIn and Instagram for further investigations and updates.

[Dallas Analytics @dallas_analytic]

🚨 Russia is preparing to significantly expand Mi-8 helicopter production. According to documents obtained by Dallas Analytics, the Kazan Helicopter Plant is scheduled to manufacture 72 Mi-8MTV-1 helicopters in 2026–2027 under Russia’s state defence order.
❗This figure is nearly twice as high as previous estimates of Russia’s production capacity and could allow Moscow to offset wartime losses sustained during its invasion of Ukraine. If achieved, these production targets could help restore Russia’s airborne assault and transport aviation capabilities to levels approaching those seen before the full-scale invasion.
📁 At the same time, the leaked documents reveal persistent weaknesses within Russia’s defence-industrial base, including dependence on engine and avionics suppliers, financing challenges, production bottlenecks, and growing reliance on state reserve funds to sustain military output.
What threat could these helicopters pose to Ukraine and NATO? How realistic are Russia’s ambitious production targets? And what do the documents reveal about the vulnerabilities of the Russian defence industry?
🔍 Read our full investigation: https://t.co/bpegXvN6cZ
We have also expanded the list of our channels – you can now follow Dallas Analytics on Substack, Threads, LinkedIn and Instagram for further investigations and updates.

[Dallas Analytics @dallas_analytic]

✈️ With planes breaking down and repair hubs facing insolvency, the Russian military is navigating a full-blown airlift crisis. It needs to move materiel, but its own aircraft increasingly cannot. The solution? Civilian aviation.
🕵️ A new Dallas investigation reveals how the Russian MoD co-opts commercial operators and joint-use aerodromes to bridge its logistical collapse. Primary evidence exposes these "civilian" fleets:
🇨🇳 Moving military cargo to China for sanctioned defence contractors
🇺🇬 Routing electronics from Uganda to supply Almaz-Antey
🇮🇳 Evading oversight to transport missile systems & warheads to India
Furthermore, the MoD is hiding military aircraft on the civilian registry to fly sensitive missions abroad disguised as ordinary commercial charters.
🔍 Read the full analysis here: https://t.co/GETRc1Mw4H

[Dallas Analytics @dallas_analytic]

🚨 ExpoElectronica 2026: how a Russian trade show enables sanctions evasion
Dallas analyzed 719 participants of a major electronics exhibition in Moscow and uncovered a network supplying Western components to Russia – despite sanctions.
Key findings:
📌 Russian importers continue sourcing electronics for the military-industrial complex;
📌 Chinese companies act as key intermediaries;
📌 Western components (such as Siemens) are routed via third-country intermediaries.
Even small firms play a critical role in sustaining Russia’s access to dual-use electronics.
❗️Bottom line: sanctions on Russia alone are not enough without targeting foreign intermediaries.
ExpoElectronica effectively serves as a ready-made database of potential sanctions violators.
🔎 Read the full investigation for details
https://t.co/EOYDbpxyDB

[Dallas Analytics @dallas_analytic]

🚨 On 31 March 2026, a Russian An-26 military transport crashed during a routine flight over occupied Crimea, killing all 29 people on board, including Lt. Gen. Aleksandr Otroshchenko, commander of the Northern Fleet’s Mixed Aviation Corps.
🕵️ Dallas obtained confidential internal documents suggesting this was not just an isolated accident, but part of a broader decline in Russia’s military aircraft maintenance infrastructure. According to Russia’s own officials, the system has been hollowed out by the war against Ukraine, strained by Western sanctions, and undermined by mismanagement at the highest levels.
✈️ Russia still relies on roughly 368 Antonov aircraft across its military and security services, including the An-12, An-26, and An-72. Of these, 143❗currently require repairs. Unless urgent measures are taken, within 18 to 24 months their operation will cease entirely.
📰 Our investigation examines Aviaremont JSC, part of Rostec, a key repair provider for Russia’s military aviation fleet. In December 2025, Aviaremont acknowledged that its subsidiary, 308 ARZ, could not properly service An-series aircraft due to missing design documentation, failed import substitution, and the lack of domestic production for critical spare parts.
🔍 Journalists, analysts, and researchers seeking further detail or access can reach out via our website form
https://t.co/7H6VK2fuWU

[Dallas Analytics @dallas_analytic]

🛢️ Dallas has obtained a secret drone defence plan from Rosneft – the source of about a third of Russia’s crude, led by Igor Sechin, a close ally of Vladimir Putin.
📄 The document is both a confession and a roadmap: a confession that Russia’s largest oil company cannot fully protect its refineries, and a roadmap revealing just how fragile those systems really are.
🔍 It maps the security layers Ukrainian forces may face – and serves as a cautionary study for Gulf states on what fails against evolving drone threats. https://t.co/ZcbAHjQIFf

[Dallas Analytics @dallas_analytic]

🕵️It has been two weeks since we’ve published an investigation showing United Russia – Putin's ruling party – knowingly approved and elected compromised candidates. Party bosses with documented criminal histories and a propensity for systemic graft have put maximum effort into containing the damage.
🔥Therefore,we sincerely thank our community and everyone who helped spread the word about vetted criminals running Russia.
🔍 Our investigation highlights only a fraction of the verified database – we invite investigative journalists and researchers to take a closer look 👇
https://t.co/bVRFaoHsUS
#GnedovLeaks

[256 Cyber Assault Division @256CyberAssault]

@christogrozev @cpartisans @christogrozev , we a email dumps of some of this guys, are you interested in this data ?

[Dallas Analytics @dallas_analytic]

🚨 Dirty secrets of the pro-Kremlin United Russia party revealed in a major joint investigation by Dallas, @256CyberAssault, and Ukrainian Militant.
🕵️ We obtained raw operational intelligence containing the private dossiers of United Russia's political candidates. This data comes directly from Evgeniy Gnedov – retired penitentiary system Lt. General, a key advisor within the party, and Medvedev protégé.
#GnedovLeaks

[256 Cyber Assault Division @256CyberAssault]

📡 Remember when the Russian MoD was frothing at the mouth, swearing there were no Starlinks on the frontline and calling them “useless NATO garbage”?

Apparently, the enemy’s “unmatched” internet is so powerful that even after their “money mule” schemes were exposed, they’re still desperately trying to activate these terminals with the help of would-be collaborators:)

Top-tier work by the Security Service of Ukraine (SSU) once again!

As for us – stay tuned!
We’re dropping somethin major tomorrow.

[СБ України @ServiceSsu]

СБУ викрила агента фсб, який «вербував» українців, щоб зареєструвати на них російські Старлінки

��️ https://t.co/p86CGM9GcF

[256 Cyber Assault Division @256CyberAssault]

Today, the 256 Cyber Assault Division turns 3!

Three years ago we launched with one goal – to hit back at the enemy hard. We know they feel it 😏

A huge thank you to our supporters, partners, and the entire #OSINT community – none of this happens without you!

🎁 And for our anniversary gift we're announcing a major investigation together with the private intelligence and analytics company @dallasparkua – diving deep into Putin's elite.

It's going to be hot. As always. 🔥

[Dallas Analytics @dallas_analytic]

🇰🇵🚛🇧🇾 A new Dallas investigation uncovers sustained commercial ties between MAZ – Belarus’s state-owned producer of heavy-duty trucks and military vehicles – and North Korea’s Chosun Kyonghun 1 Trading Company. The most recent contracts, covering large shipments of critical automotive components, date to 2025 – an unambiguous violation of UN Security Council Resolutions 2375 and 2397, which comprehensively prohibit all trade with DPRK state entities.

🕵️‍♂️ At the heart of the story is Belarusian citizen Aliaksei Adamovich. Trained as an engineer, he coordinates illicit supply chains moving North Korean and Chinese components – drive shafts, steering systems, and electronic control modules – to support Russia’s war effort. Acting as a technical intermediary, he enables sanctioned Russian firms such as UralAZ to sustain production of military chassis powering the Kremlin’s offensive.

❗The Adamovich case highlights systemic weaknesses in Western sanctions enforcement. Despite functioning as a key facilitator for sanctioned state-owned manufacturers, he reportedly enjoys “gold-tier” travel privileges while pursuing permanent residency in Poland.
Read the full Dallas investigation below and support our work by subscribing to the channel ⬇️
(Link in thread)

[256 Cyber Assault Division @256CyberAssault]

We’ve exposed cooperation between Russian army officers and representatives of Kadyrov’s Vostok-Akhmat battalion in an illegal arms trade.

Discover how weapons from the front lines are being smuggled into temporarily occupied Crimea in our latest investigation with @InformNapalm:https://t.co/2yDkNieDnS

👉 Media representatives interested in this story are encouraged to contact us at: [email protected]

[InformNapalm @InformNapalm]

1/ Українська хакерська група @256CyberAssault у співпраці з міжнародною розвідувальною спільнотою @InformNapalm провела чергову #CYBINT-операцію, в ході якої були здобуті важливі для Сил оборони України розвідувальні дані.
Деталі в статті: “Можемо хоч ядерку провезти”: як офіцери 291-го полку ЗС РФ і «Восток-#Ахмат» налагодили контрабанду зброї через Крим
https://t.co/KkAchqWyx0

[256 Cyber Assault Division @256CyberAssault]

https://t.co/oIxrn9Ff1E

[256 Cyber Assault Division @256CyberAssault]

☣️☣️☣️ Classified documents obtained by the 256th Cyber Assault Division show Russia is planning an ecological catastrophe in Kherson. Here’s what that means for Ukraine and its Western allies