Full Report
Russia's Kosmos 2612 came very close to ICEYE X36, which reportedly has Ukraine connections, after weeks of highly unusual maneuvering. The post Russian Satellite’s Unprecedented Shadowing Of A Very Particular Radar Imaging Satellite Is A Big Deal appeared first on TWZ.
Analysis Summary
# Russian Kosmos 2612 Close Approach to ICEYE X36 (Commercial SAR Satellite)
## Key Points
- Russian satellite Kosmos 2612 (also written Cosmos 2612, K2612) may have passed within about 26 m (85 ft) of ICEYE-X36, a U.S.-registered commercial synthetic aperture radar (SAR) imaging satellite. Published tracking data places the close encounter at approximately 16:07 UTC on October 18, 2026.
- LeoLabs, a private space tracking company, could not confirm or contradict the 26 m figure but reported "high-confidence" that the objects came within approximately 500 m (1,640 ft) of each other.
- The approach followed weeks of increasingly close orbital alignment. Kosmos 2612 made progressively closer passes over ICEYE-X36 in the days before the encounter.
- According to LeoLabs, Kosmos 2612 closed from hundreds of kilometers to extreme proximity, maneuvered around ICEYE-X36, remained nearby for an extended period, and then moved away. Later observations show the spacecraft diverging, and close-proximity activity has ended.
- ICEYE-X36 was launched in 2024. Ukrainian authorities have reportedly used ICEYE imagery for years, including for targeting, which may explain the satellite's reported interest to Russia.
- The event is notable because it is highly abnormal for uncoordinated space operations. For comparison, in 2020 Russia's Kosmos 2542 approached the U.S. KH-11 satellite USA 245 at 150–300 km.
- ICEYE stated it is "tracking it closely" and that its "constellation architecture is designed for continuity and resilience." No damage or loss of function has been reported in the source material.
## Threat Actors
- **Russia (state-linked):** Kosmos 2612 is a Russian state satellite. The source does not attribute specific intent, but the pattern and the target's reported ties to Ukraine suggest a possible intelligence, surveillance, or counterspace motive. This is an analytical inference, not a confirmed finding.
- **Target:** ICEYE, a Finland-founded commercial SAR provider with a global presence, and its satellite ICEYE-X36 (NORAD/catalog ID 59103). The article notes reported Ukraine connections, which likely drive Russian interest.
- **Context:** The article frames the event within broader rising counterspace competition, referencing new anti-satellite weapons being designated U.S. priorities.
## TTPs
- **Orbital proximity operations (rendezvous/proximity ops):** Gradual approach over weeks, closing from hundreds of kilometers to extreme proximity.
- **Evasive or inspection-style maneuvering:** Circling around the target, remaining nearby for an extended period, then departing. This pattern is consistent with stalking, inspection, or harassment rather than routine station-keeping.
- **Uncoordinated close approach:** The encounter occurred without apparent coordination between the parties, which is the core concern.
- **Observation method:** Public tracking data (satellitemap.space, orbitalradar.com) and commercial SSA (LeoLabs) were used to detect and characterize the event.
- **MITRE ATT&CK:** Not applicable. This is a space-domain event, not a cyber intrusion.
## Affected Systems
- **ICEYE-X36:** Commercial SAR imaging satellite (launched 2024), the directly targeted asset.
- **ICEYE constellation:** Potentially affected through operational concerns about continuity and resilience, though the source reports no impact to the constellation.
- **Kosmos 2612:** Russian satellite, the active party in the approach.
- **Downstream users:** Ukrainian and other customers relying on ICEYE imagery could be affected if the satellite's operations were disrupted.
- **Scope:** A single-satellite proximity event. No broader infrastructure impact is reported.
## Mitigations
- **Conjunction assessment and tracking:** Continuous monitoring of close approaches using multiple independent sources (e.g., LeoLabs, public catalog data, satellitemap.space, orbitalradar[.]com) to verify distances and trajectories.
- **Maneuver planning and collision avoidance:** Operators should maintain the ability to execute avoidance maneuvers and to assess the risk of unplanned close approaches.
- **Constellation resilience:** Redundancy and distributed architecture, as ICEYE describes, reduce the operational impact of any single satellite being targeted or disrupted.
- **Information sharing:** Timely sharing of SSA data among operators, government agencies, and commercial providers to improve situational awareness.
- **Detection:** Watch for sustained, non-routine relative motion between objects, particularly repeated approaches that deviate from standard operations.
- **Policy and norms:** Advocate for responsible behavior and transparency in space operations, such as pre-notification of proximity activities.
## Conclusion
This incident is a significant space-domain security event rather than a conventional cyber threat. A Russian satellite conducted an unusually close, sustained, and apparently non-coordinated approach to a commercial SAR satellite with reported ties to Ukraine. While no damage has been reported, the proximity (as close as about 26 m, with LeoLabs confirming within about 500 m) represents a real collision risk and a possible counterspace or surveillance activity.
**Assessment:** Likely deliberate, state-directed proximity operation with possible intelligence or coercive intent. Intent is not confirmed.
**Recommendations:**
- Commercial and government satellite operators should treat unexplained, repeated close approaches as a potential hostile activity indicator.
- Operators with assets of military or intelligence relevance should strengthen SSA capabilities and maintain collision avoidance readiness.
- Continue monitoring Kosmos 2612 for renewed approaches.