Tagged: russia

Receiving Russian Satellite TV from the Express AM8 Satellite and watching the Hacking and Jamming Attempts

Since the Russian invasion of Ukraine, the EU has banned the broadcast of Russian TV channels. This is caused Russia to move their satellite broadcasts from internationally owned satellites, to their own "Express AM8" geostationary satellite.

The Russian satellite can be received from Europe and parts of South America. What's interesting in particular is the hacking and jamming attempts going on on this particular satellite. These breaches are likely to be from individual people or by the Ukrainian Ministry of Strategic Communication. An example of a hack by Ukrainian Ministry of Strategic Communication on 5 January 2023.

Express AM8 transponder 11647V was hacked today at 6:30 PM by Ukrainian Ministry of Strategic Communication. A New Year's address by Ukrainian President V. Selensky was shortly broadcast in Ukrainian on all program positions of the T2-MI transponder.

Express AM8 hacked by Ukraine to broadcast the New Years address by Ukrainian President V. Selensky

Alex 'Happysat' has written to us with the following information. The full guide to receiving TV from the satellite, and information about the satellite and signals and modulations used on the satellite is on GitHub at https://github.com/happysat/Express-AM8.

You may know that here in Europe a number of controversial Russian, Syrian and Iranian (news) channels are not allowed to be broadcast due to sanctions against Russia (everything) and Iran (Press TV).

The Russians moved most of the channels (Rossiya 24, RTR Planeta, NTV Mir, Perivy Kanal, Press-TV) to their own satellite Express AM8 some time ago.

Since it is not a normal DTH satellite such as Astra or Hotbird, everything happens there (jamming / hacks) which is interesting for many (dx) viewers.

Because it is relatively easy to receive in Europe and parts of South America, I have created a GitHub website with some useful tips and tricks.

Not only in terms of content, but also the technical side of it, the different modulations broadcast techniques T2-MI (unfortunately gone for a while after the hacks…) but also just old-fashioned DVB-S signals, Telemetry and some transponders (only symbol rate lower than >2000ks) are even without the need for a satellite receiver.

For example with an SDR radio and the AM-SAT program what the radio amateurs use on Eshail2.

And that a '14 west setup' can easily be made, which does not have to be expensive at all.

This is the website https://github.com/happysat/Express-AM8/blob/main/README.md

Examples of jamming on Russian geostationary TV satellite Express AM8

Financial Times Story about Ukraine Radio Monitoring with WebSDRs

The Financial Times has recently run a video story on how hobbyist WebSDR setups are being use to record Russian radio communications during the war on Ukraine.

In these modern times, we would expect the Russian military to be making full use of encrypted radio communications on the battlefield. But early on in the invasion it came to be clear that much of the Russian forces are much less advanced than first thought, and are using cheap civilian unencrypted radios that anyone nearby can listen to with an RTL-SDR or via a web connected SDR.

The FT story focuses on how open source contributors from all over the world are helping to monitor internet connected WebSDRs that are close enough to receive Russian radio communications. And how volunteers are helping translate, confirm authenticity, and collect information about possible war crimes. 

If you are interested, previously we posted about a similar video story from the New York Times, and have covered various bits of radio related news from the war in two previous posts [1][2].

Ukraine's battle of the airwaves | FT

New York Times Story on Intercepted Russian Forces Radio Communications

The New York Times have recently run an incredible video story about how Russian radio communications are being intercepted and recorded by ham radio operators and open source radio monitoring hobbyists in Ukraine. Some of the communications reveal the extent of the logistical issues experienced by the invading forces, and perhaps have even recorded evidence for war crimes.

It appears that much of the invading Russian forces use simple unencrypted analogue voice over HF channels that can be intercepted and recorded by anyone with an HF software defined radio, or anyone willing to monitor nearby web-based SDRs like KiwiSDRs and WebSDRs. In the video screenshots of recordings played back in SDR# and various WebSDRs are displayed.

The story focuses mostly on the audio recordings that highlight communications between Russian forces discussing attack plans, including plans to bombard residential areas with artillery. These recordings are cross-referenced with reports and videos of actual tank sightings and destruction in the areas discussed on the radio.

A later recording highlights communications from a distressed Russian vehicle under attack, requests for air support being unfulfilled, and urgent requests for supplies like fuel, food and water. 

Russia Struggled to Capture a Ukrainian Town. Intercepted Radio Messages Show Why.

Some of the monitoring projects involved are highlighted in the story and they include, Project Owl, Ukrainian Radio Watchers, ShadowBreak and NSRIC (Number Stations Research and Information Center). We are also aware of at least one other organization attempting to record communications within Ukraine as well that may be making use of RTL-SDRs, HackRFs and other SDRs.

Radio Related News Occurring in the Russia-Ukraine Conflict

In the current Russia-Ukraine conflict we've seen several noteworthy radio related events occurring over the last few days, mostly throughout Twitter.

Russian HF Bomber Communications

As mentioned in the previous post it has been found that since the start of the invasion, Russian Strategic bombers have been very active on USB voice at 8131 kHz. We've even seen a security firm predict air raid siren activations based on increased bomber HF activity. 

Russian Military HF Frequencies Jammed by Activists

It has been observed that several Russian military HF stations including the famous UVB-76 Buzzer have been jammed with either the Ukrainian national anthem, or various meme-type songs. It is likely that these stations are being jammed mostly by civilian activists, or members of the activist hacker collective known as Anonymous, rather than any military organization.

The UVB-76 Buzzer is a famous and mysterious numbers station that plays a buzzing sound and sometimes voice. It can be received from all over the world. Via civilian investigations, and through the use of the KiwiSDR TDoA direction finding functionality, it has been found to be transmitted from a location just north of St. Petersburg, and is assumed to be a military signal of some sort.

We've also seen waterfall text based jamming:

Using KiwiSDRs you can listen to these jammed stations yourself remotely through public internet connected SDRs in Europe. Some known frequencies are listed here and here

We note that there have also been reports about fake Russian frequencies being posted on the internet.

We assume most jamming is happening from outside the warring countries, and it is unknown how far the jamming signals extend onto Russian or Ukrainian territory, or how much of an impact they are having on Russian operations.

Russian State TV Hacked

Twitter account Anonymous TV has reported hacking Russian state TV to show citizens what is actually happening in Ukraine. It's unknown if this was a hack via TV transmissions being overpowered by another signal, or a computer hack.

Starlink Activated in Ukraine

A few days ago Elon Musk and SpaceX activated their Starlink wireless satellite internet system in Ukraine, and have sent over a shipment of ground terminals. This is useful as even if the local wired internet were to be destroyed, or be censored by Russia, the Starlink system will be able to connect to uncensored internet as long as there is power. 

An account of a Ukrainian engineer and RF hobbyist recently Tweeted his success at getting his Starlink system up and running from his home in Ukraine. We decided not to link to his Twitter account in this post, just in case he needs to delete his account for safety in the future as he appears to be very close to the bombing.

Viasat Satellite Service Experiences Cyberattack and Outages

Viasat, another provider of satellite internet services in Ukraine region appears to have been subject to a DDOS cyberattack, causing outages to it's satellite internet service in the European region.

SSTV Activism Seen On Russian Meridian Satellites

Meridian satellites are a "family of telecommunications satellites for civil and military use developed by Russia in the 2000s placed in a Molniya Orbit" (Wikipedia). A tweet by Scott Tilley @coastal8049 has noted that they have seen reports of SSTV activist activity occurring on the 484 MHz Meridian transponders. 

Scott Tilleys Twitter feed also shows some interesting other pieces of news and information, including frequencies and orbits of Meridian satellites, images of a destroyed Russian command and control satellite communications vehicle, and links to now deleted, but Google cached pages with information about Russian satellite communication systems.

APRS Activism against Russia causes APRS-IS DDOS

Amateur radio operators can use a system called APRS to communicate with text and packet data globally through internet connected radio repeaters. A few days ago it appears that anti-Russia activists flooded the APRS-IS (Automatic Packet Reporting System-Internet Service) system with bogus packets targeting Russian coordinates, which unintentionally resulted in a denial of service (DOS) event on APRS trackers like aprs.fi

DARC Urges Safety First for Ukraine and Foreign Amateur Radio Hobbyists

The German ham-radio association known as DARC has issued a warning to Ukrainian hams, and to foreign hams who may receive from them. Amateur radio operations are currently banned in Ukraine due to wartime laws.

Poland Amateur Radio Society Provides WinLink HF Email Service

In response to geopolitical threats, the Poland Amateur Radio Society has set up a HF WinLink email system, aimed at provided email services to amateur radio operators that could be cutoff from internet email services. It appears this may be aimed at helping Ukrainians communicate, however in these modern days of electronic warfare, it is important to take into account the warning from DARC above too as transmitting stations could easily be located by Russian electronic warfare forces.

Dear HAM operators, in the face of the latest threats in our region and a possibility of an incoming wave of refugees, with over 2 mln already living in Poland, we would like to remind you that we are at your disposal.

If you are a licensed amateur radio operator, you can send information by e-mail to your relatives in Poland or Emergency Services with via the Winlink system, which works on HF bands, independently of access to the local ICT infrastructure https://winlink.org/WinlinkExpress.

We advise you to download the software, install it and check its operation.
Polish WinLink nodes are QRV on 160,80,20m
SR5WLK dial frequency 3595,5 kHz USB
SR3WLK dial requency 14111 kHz USB
SP3IEW dial frequency 1865 kHz USB

If we receive information about the cut-off of the Internet in the region in danger, we will be QRV daily as SP0MASR @ 18-20 UTC on the frequencies 3770 kHz +/- QRM, 7110 kHz +/- QRM. In such a situation, please communicate in Polish or English.

We are here to serve you.

Shortwave Listening Updates

The excellent SWLing.com blog has also provided some updates on shortwave, including news that WRMI have resumed broadcasts of Radio Ukraine International, Ukrainian state radio resumes broadcasting at 549 kHz, and that the BBC adds to new broadcasts to Ukraine.

Russian Oligarch Jets Tracked with ADS-B

An activist has set up a Twitter account to track the private jets of Russian Oligarch's via ADS-B. ADS-B aircraft data can be used to track aircraft locations, and these signals are typically received with low cost SDRs like RTL-SDRs. The project appears to use data sourced from adsbexchange.com which is known to be one of the only ADS-B aggrators that does not censor data.

The 7055 kHz 'Radio War' Frequency Sees Increase in Activity

In has been reported that the 7055 kHz LSB amateur radio frequency has been used by Ukrainian and Russian amateur radio operators for some time now to insult each other in a 'radio war', and recently activity has significantly increased. Other frequencies involved include 7050 kHz LSB and 3731 kHz.

Captured Equipment Shows Russian Radio Hardware In Use

A recent tweet shows a photo of hardware supposedly captured from Russian forces. Of interested is a Russian R-187PI Azart, a handheld digital software defined radio.

At the same time unconfirmed reports suggest that some parts of the Russian army may be relying on civilian Baofeng radios.