Alarms have been raised across Europe following assessments by security officials that two Russian spacecraft may have intercepted communications from at least 12 critical European satellites. According to officials cited by the Financial Times, the interceptions—reported publicly for the first time—may not only have exposed sensitive data but could also give Moscow the capability to interfere with satellite orbits or even disable them.

Russian spacecraft activity near European satellites has intensified over the past three years, a period marked by heightened tensions between Moscow and the West following Russia’s full-scale invasion of Ukraine. Western military and civilian space authorities have long monitored the behavior of two Russian satellites, known as Luch-1 and Luch-2, which have repeatedly carried out what officials describe as suspicious maneuvers.

The two satellites have made close and potentially dangerous approaches to some of Europe’s most important geostationary satellites, which operate at high altitudes and provide communications services across Europe, including the United Kingdom, as well as parts of Africa and the Middle East. Orbital data and ground-based telescope observations show that the Russian satellites have remained in close proximity to their targets for weeks at a time, particularly over the past three years. Since its launch in 2023, Luch-2 has approached at least 17 European satellites.

Suspected intelligence gathering

Major General Michael Trout, head of the German armed forces’ space command, told the Financial Times that both Russian satellites are suspected of conducting signals intelligence (SIGINT) operations by positioning themselves close to Western communications satellites. A senior European intelligence official said the Luch satellites appear designed to operate within the narrow transmission cones used to send data from ground stations to satellites.

The same official expressed concern that many European satellites transmit sensitive information—particularly command and control data—without encryption. Many of these satellites were launched years ago, before modern cybersecurity standards were widely adopted, making them vulnerable to interference if their command signals are intercepted and recorded.

Officials say these activities form part of a broader escalation of Russia’s “hybrid warfare” campaign in Europe, which has included acts of sabotage such as damage to undersea internet and power cables. Intelligence agencies and military analysts increasingly fear that similar tactics could be extended into space.

Advanced space espionage

While China and the United States have also developed similar technologies, European officials believe Russia operates one of the most advanced space-espionage programs and has shown greater willingness to deploy such capabilities aggressively. “Satellite networks are the Achilles’ heel of modern societies. Anyone who strikes them can paralyze entire states,” German Defence Minister Boris Pistorius said in a speech in September, warning that Russian activity poses a fundamental threat, particularly in space.

The European satellites approached by Luch-1 and Luch-2 are primarily used for civilian purposes such as satellite television but also carry sensitive government and some military communications. According to a European intelligence official, the Russian spacecraft do not appear to have a direct capability to jam or destroy satellites. However, the data they collect could allow Russia to understand how these systems might be disrupted, either from orbit or from the ground.

Potential consequences of the intercepts

Major General Trout said he believes the Luch satellites intercepted the “command link” of the satellites they approached—the channel used by ground controllers to manage satellite operations and make orbital adjustments. Analysts note that, with access to such information, an adversary could potentially send false commands, manipulate thrusters, alter a satellite’s position, or even cause it to malfunction or be lost.

In addition, intelligence gathered by Luch-1 and Luch-2 could enable more subtle operations, such as targeted jamming or cyberattacks. By monitoring satellite traffic, Russia could determine who is using specific satellites and from where.

Belinda Marchand, chief scientific officer at the US space-tracking company Slingshot Aerospace, said the Luch satellites have been “manoeuvring and parking near geostationary satellites, often for many months.” She added that Luch-2 is currently operating close to Intelsat 39, a major communications satellite serving Europe and Africa.

Slingshot data show that since 2023, Luch-2 has approached at least 17 geostationary satellites supporting both commercial and government communications. Norbert Pugin, senior orbital analyst at the French company Aldoria, said the Russian satellites “visit the same families of satellites and the same operators,” many of which are linked to NATO countries, suggesting a deliberate targeting strategy.

Even without decrypting communications, Pugin said, Russia can extract valuable intelligence by mapping satellite usage patterns and identifying ground station locations. He also noted that Russia appears to be expanding its space reconnaissance efforts, having launched two additional satellites last year—Cosmos 2589 and Cosmos 2590—with similar maneuvering capabilities. One of them is now moving toward the geostationary orbit region, about 35,000 kilometers above Earth.

There are also indications that Luch-1 may no longer be operational. On January 30, ground-based telescopes detected what appeared to be a gas release from the satellite, followed shortly by signs of partial fragmentation. “It appears to have been triggered by a propulsion failure,” Marchand said, adding that the satellite subsequently broke apart and began “spinning uncontrollably.”