Ukraine's Reach into Russian Internet, Hormuz Mines

2026-10-24 · One theatre in depth · Ukraine's reach into Russian consumer internet, Hormuz mines and the strike window, The Oleshky micro-ceasefire

Geopolitics show11:32Download MP3About the show

How it is made. Aavistus Geopolitics is written and voiced by our own systems, every morning, from data we gather ourselves. The voices are synthetic. Every fact is traced to a source on this page, and every dated call is settled in public on the calibration page. The presenters, Nora and Owen, are named characters, not people.

Aavistus is a new framework, still under development. We will make mistakes, and every dated call is settled here in public so you can see them; the aim is to keep calibrating until the record beats the average forecaster, not to sound right.

Ukraine's cyber reach extends into Russian consumer internet, two supertankers hit mines in the Strait of Hormuz, and Melania Trump brokers a single-town ceasefire.

Aavistus Geopolitics. Security, diplomacy and the balance of power, from a Nordic point of view. Subscribe to the show.

Ukraine's Reach into Russian Internet, Hormuz Mines

One theatre today, taken further than the daily pass allows: Ukraine's reach into Russia's consumer internet, with services the ordinary Russian touches every day sitting inside the target set. Then the Hormuz mines, and the small ceasefire in southern Ukraine with Melania Trump's name on it.

Ukraine's reach into Russian consumer internet

For months the direction has been loud on one side and quiet on the other. Russia is pounding Ukraine's digital infrastructure at an intensity comparable to its ongoing strikes on the power grid; Ukraine's prime minister has said as much on the record. What has had a quieter unveiling is the mirror. Ukraine is now hitting back into Russia's consumer internet layer, with services the Russian citizen compares to Google — Yandex named inside the strike-event cluster — inside the target class.

Three reasons the signal has been easy to miss. When Ukrainian drones hit a data centre or a telecoms node, Western press tends to code it as a kinetic strike on infrastructure, collateral in the broader air campaign, rather than the opening of a cyber-coupled target class. Second, the daily noise floor on Russia-Ukraine strikes buries the specific vector. Third, and this is the Nordic point: the side being hit stays quiet, because consumer internet outages are politically embarrassing in a way military targets are not.

The balance of forces is not what it looks like. The actors are Ukraine's military intelligence directorate on one side; on the other, Russian internet companies drafted by law and directive into state information infrastructure. The terrain is a shared stack — content delivery networks, domain name resolution, cloud providers, upstream peering — more global than national. Ukraine gains a reciprocal pressure point that costs Russian households daily minor inconvenience and the Kremlin a visible loss of digital sovereignty. Russia gains a public case, already being made, that Ukraine is now a terrorist actor against civilian internet. The ones who do not gain, from a Nordic point of view, are Finnish and Swedish operators who sit in the same shared stack and will be pulled into tit-for-tat Russian retaliation whether or not they are party to any of it.

The view: a pattern-in-the-making. A credible public attribution from Ukraine's intelligence directorate limiting Russian consumer internet strikes to a one-off punitive package would make us revise. A second named Russian consumer internet platform publicly disrupted inside sixty days — VK, the Mail.ru stack, Rostelecom's consumer arm — turns the one-off into a pattern.

Against this reading sits an argument this week from Lt. Gen. Luca Goretti, formerly chief of staff of the Italian Air Force and now chairman of Leonardo US Corporation, on the Center for European Policy Analysis: the dominant long-term shift in defence is artificial intelligence compressing decision cycles, and the human mind must retain the capability for a last-ditch intervention. The framing survives, but only on the strategic edges. In the cyber domain the compression is already there — the automation runs below human cycle times for routine defence. What Goretti's point says to Finland, Sweden and Norway is that the last-ditch intervention — a decision to escalate off the network — must stay on a human cycle. The Nordic position: Finland should treat its own consumer internet infrastructure, the operators, the domain name system and peering, as sitting inside the same category Yandex has just entered — a civilian service with wartime target status by adversary definition. What confirms: a named Russia-linked cyber action against a Nordic consumer internet operator attributable in open press within six months.

Hormuz mines and the strike window

Overnight two supertankers hit naval mines in the Strait of Hormuz — the Iranian Revolutionary Guard's own account, carried by Anadolu Agency and amplified through Middle East Eye. Iran separately claimed seven oil tankers hit across the Persian Gulf in the past three days, in a Daily Caller account citing Iranian military sources. The market now has crude oil at a twenty-two-week high on the Gulf attacks; Hellenic Shipping News reports around six thousand seafarers trapped as the shipping crisis deepens.

Our standing range view on Brent through next summer has held through today. What changed is that the latest print sits above the top of that range. Our view through yesterday was that pushing against the top required sustained disruption to Saudi flows. What we have instead is mine warfare inside the strait itself — a different vector, and the market is pricing it as the real thing.

Two framings on whether the Americans strike, and they are not the same story. One, through Clarin and Middle East Eye, is that a Trump envoy said the United States could strike Iran this weekend. The other, from the Financial Times, is that a Trump envoy told the paper Washington is preparing for a prolonged Iran conflict, with Israel National News and the Dutch outlet NU.nl both carrying a planned post-midterms Iran offensive with the mother-of-all-bombs class munition in the public briefing. The weekend framing is intimidation theatre. The post-midterms framing is a plan.

The read: Iranian capability is now operating inside the strait rather than on its edges, and that is new. Brent above the top of the standing range makes today's print a test of the view, not a break. The case for a direct US strike on Iranian territory inside the next ten days is not there — the political signal is dated after the midterms, not before. Sustained Hormuz mine warfare over the next two weeks, with a second confirmed supertanker hull casualty, would move us off the view; a rapid de-escalation within seven days, with Lloyd's List transit volumes recovering, would re-anchor it.

The Oleshky micro-ceasefire

The White House, carried by Reuters, announced that Melania Trump personally brokered a temporary ceasefire between Russia and Ukraine around the occupied town of Oleshky, in southern Ukraine's Kherson Oblast left bank, with peace talks to follow next month. On the same day, Al Jazeera reported that a Russian drone sank the cargo ship Khoryv off Romania, killing a Ukrainian sailor, with Romania's president publicly blaming Russia. European Commission President Ursula von der Leyen told press she was deeply alarmed at the Russian escalation.

The micro-ceasefire has no reach beyond the one locality. The Trump administration wants a visible deliverable and has pulled the first lady's name into it; Moscow is willing to concede a one-town ceasefire as atmospherics while sinking a civilian cargo ship in the same day. Oleshky is not a template; it is a photograph. The read is wrong only if a named second town joins the ceasefire inside two weeks and the daily strike tempo on Ukrainian civilian infrastructure drops materially — neither of which is happening.

What we are watching next

Three things over the next week. Whether a second named Russian consumer internet platform is publicly reported disrupted — the sign that Ukraine's reach is a campaign, not a punishment. Whether transit volumes through the Strait of Hormuz confirm or deny today's price print — Lloyd's List is the publication to watch there. And whether the strike-window briefings against Iran convert into an actual strike inside the next ten days, which, on everything the open record shows at the moment, we do not expect.

Calls

Sources