Ukrainian attacks on Russian ships refers to a series of military operations conducted by the Security Service of Ukraine (SBU) against Russian oil tankers throughout 2025. Operating primarily in the Black Sea, Mediterranean Sea, and other seas, these attacks represent a significant escalation in Ukraine's maritime warfare strategy, targeting merchant vessels allegedly used to circumvent international sanctions on Russian energy exports. [1] [2] [3]
Ukraine has conducted maritime operations against Russian forces since the 2022 invasion. However, 2025 marked a dramatic shift in scale and geographic scope, with Ukraine developing and deploying advanced unmanned naval systems known as "Sea Baby" and "Sub Sea Baby" drones. The campaign focused on two primary objectives: degrading the Russian Black Sea Fleet and disrupting Russia's "shadow fleet" — a network of roughly 1,000 vessels used to transport Russian oil in violation of Western sanctions and the G7 oil price cap. [1] [2] [4]
According to a report by The Atlantic , citing U.S. and Ukrainian officials, the Trump administration did not object to the Ukrainian strikes on the shadow fleet, and approved assistance for the strikes, with the US considering the strikes an "important tool" to put pressure on the Kremlin to negotiate peace. The publication details that Donald Trump did not object to attacks on Russian oil logistics in international waters and, in several instances, approved sharing intelligence with Kyiv. This intelligence was subsequently used to target Russian oil infrastructure. [5]
Multiple vessels which had recently called at Russian ports have been attacked with limpet mines or underwater explosives in the Mediterranean, many operated by Athens-based shipping company Thenamaris. [6] [7] [8]
A report from the security company Ambrey concludes that the attacks were perpetrated by "an unnamed state actor targeting ships calling at oil ports" likely using limpet mines with delay action planted by divers using small submarines. [9] Two vessels were sunk, the 9500 ton freighter Ursa Major off Spain on 24 December 2024 and the 164000 ton super tanker Koala while moored at Ust-Luga, Leningrad Oblast, [10] on 9 February 2025 [11] and three others, Seajewel, Seacharm and Grace Ferrum were damaged. [10]
Despite the lack of concrete evidence or official results from investigations, the repeated targeting of ships associated with Russian trade has led security analysts and maritime industry bodies to privately assess a probable link to the ongoing war in Ukraine. [10] [12] Despite the fact that the Ambrey report attributed the attacks to an unspecified state actor without naming Ukraine, private discussions among security professionals from both private firms and government agencies have frequently identified Ukrainian actors as the most likely perpetrators. [12]
According to Lloyd's List, U.S. is believed to have used diplomatic backchannels to convey a warning to the Ukrainian government in early 2025. The message reportedly indicated that if Ukraine had any involvement in the attacks, such operations should be halted immediately. [12]
Former Royal Navy officer Tom Sharpe believes that the series of targeted explosions on tankers exporting Russian oil is very likely carried out by Ukrainian special operations forces using limpet mines as a tool of precise sabotage. He assesses these operations as a form of highly effective unconventional warfare that hits the infrastructure supporting Russia's oil revenues without causing direct escalation to open conflict with the West. [13]
On November 29, 2025, Ukraine claimed responsibility for striking two Russian "shadow fleet" tankers, the Kairos and Virat , using Sea Baby naval drones equipped with enhanced warheads. Both vessels, flagged to Gambia and previously sanctioned by the United States, European Union, and United Kingdom, were en route to the Russian port of Novorossiysk when struck approximately 28 to 35 nautical miles off Turkey's northern coast. The Kairos sustained critical damage and caught fire, with its 25-member crew evacuated safely. The Virat was struck again the following morning, suffering minor damage above the waterline. Neither vessel was carrying cargo at the time of the attacks. [1] [14] [15]
On 17 December 2024 the tanker Dashan was put under sanction by the EU. [16] On 10 December 2025, Ukrainian forces attacked the ship in the Black Sea, while it was on its way to Novorossiysk with its transponders turned off. The vessel was apparently damaged in the stern section by several naval drones. [16]
A spokesman for Ukraine's SBU stated: "The SBU is actively pursuing measures to diminish petrodollar income to the Russian budget. This is the third tanker from the shadow fleet rendered inoperative in the last two weeks, which had been aiding the Kremlin in bypassing international sanctions". [17]
The attacks also damaged the Caspian Pipeline Consortium (CPC) terminal at Novorossiysk, which handles approximately 80% of Kazakhstan's oil exports. The strike destroyed a mooring facility and forced suspension of loading operations. [18] [19]
On 2 December, the Turkish company Besiktas Shipping said that it was "ceasing all shipping operations involving Russian interests" after one of its vessels, Mersin, was damaged by four explosions the previous week near Dakar. The cause of the explosions were reported as unclear. [20]
In an Ukraine claimed on December 18 2025, its first attack on a Russian vessel in the Mediterranean Sea. The target was the Qendil, an Omani-flagged shadow fleet tanker allegedly used by Russia to circumvent sanctions. The strike, conducted using aerial bomber style drones around was, according to Lloyd’s List Intelligence, most likely carried out between Crete and malta at a point 930 miles (1500 kilometers) from Ukrainian territory. [21] The attack reportedly caused critical damage, rendering the vessel inoperable. The SBU confirmed the Qendil was not carrying oil at the time of the attack, mitigating environmental risks. [2] [3] [22]
An unnamed SBU source told Business Insider: "Russia used the Qendil to circumvent sanctions and earn money that went to the war against Ukraine... The enemy must understand that Ukraine will not stop and will beat him anywhere in the world, wherever he is". [2]
The Sea Baby is an unmanned surface vessel developed and operated by Ukraine's SBU. The upgraded variant unveiled in October 2025 features an operational range of 1,500 kilometers (930 miles) and can carry payloads of up to 2,000 kilograms (4,400 pounds). Specifications include a length of 6 meters, width of 2 meters, and maximum speed of 49 knots. The platform supports multiple weaponized variants, including a gyro-stabilized remote machine gun with automatic target recognition and a ten-tube Grad-class multiple rocket launcher. Advanced features include AI-assisted targeting systems, the ability to launch reconnaissance drones, and layered self-destruct mechanisms. [23] [24]
The Sea Baby platform is designed for reusability rather than single-use attrition, with operations controlled from mobile command nodes. Development has been partially financed through the UNITED24 public fundraising platform, reflecting a distributed civil-military approach to wartime production. [25]
The Sub Sea Baby represents an evolution of Sea Baby technology for underwater operations. These drones executed the December 15 submarine strike, marking the first known use of underwater drones to attack a submerged or port-based submarine target. [26] [27]
Turkey condemned the attacks, citing threats to maritime safety and environmental protection. Foreign Ministry spokesman Oncu Keceli stated that the November 29 attacks "have posed serious risks to navigation, life, property and environmental safety in the region," and noted that the strikes occurred within Turkey's exclusive economic zone. Turkish foreign minister Hakan Fidan characterized the attacks as "very scary" and warned that they demonstrated the war's expanding reach. Turkey emphasized the necessity of suspending attacks on port and energy infrastructure in the Black Sea. [26] [28] [29]
Russia's foreign ministry condemned the attacks as "acts of terrorism" that threatened maritime freedom of navigation. Russian president Vladimir Putin issued explicit threats in response, stating on December 2: "The most extreme measure would be to isolate Ukraine from the sea, which would fundamentally eliminate the possibility of piracy". Putin threatened to escalate strikes against Ukrainian ports and shipping infrastructure. However, Russia denied Ukrainian claims regarding the submarine strike, with Black Sea Fleet spokesman Alexei Rulev stating the underwater attack "failed". [26] [30] [31]
On December 11–12, Russia conducted retaliatory strikes, launching a Shahed kamikaze drone at the Turkish-owned cargo ship CENK-T in Chornomorsk port, reportedly in direct retaliation for Ukrainian attacks on Russian tankers. Although the strike caused minimal damage to the vessel, it demonstrated Russian willingness to escalate strikes on Ukrainian ports. [32]
Ukrainian president Volodymyr Zelensky characterized Russian retaliation as evidence of Moscow's rejection of peace negotiations. In his statement following the CENK-T attack, he declared: "This demonstrates yet again that the Russians not only disregard the current diplomatic opportunities but also persist in their efforts to undermine normalcy in Ukraine". Ukrainian officials argued that attacks on shadow fleet tankers represent legitimate targeting of infrastructure used to fund Russia's war effort. [2] [3] [32]
Zelensky met with SBU director Vasily Maliuk on December 10 to discuss maritime operations, and in the official readout urged the SBU chief to continue delivering "maximum precision in our long-range operations and in dismantling Russia's logistics". An unnamed aide close to Zelensky stated: "The entire purpose of the sanctions dissipates if they are not enforced", justifying the attacks as necessary enforcement of international sanctions. [33]
The European Union expanded sanctions on December 13, with nine shipping companies and individuals being sanctioned for involvement in shadow fleet operations. Ukraine itself signed sanctions decrees against 656 ships allegedly part of Russia's shadow fleet on December 13. NATO's response remained constrained by mandate limitations, with initiatives such as the Baltic Sentry program focusing on deterrence and critical infrastructure protection rather than sanctions enforcement. [27] [34]
Analysts have characterized the campaign as part of Ukraine's broader "long-range sanctions" strategy, targeting Russia's primary revenue source during a period of difficult military circumstances on land. The expansion to the Mediterranean represents an unprecedented geographic escalation, suggesting Ukraine possesses technical capabilities and intelligence networks extending far beyond the Black Sea theater. [2] [22] [33]
The operations have raised legal and diplomatic questions regarding the distinction between legitimate military targeting of sanctions-evasion infrastructure and potential violations of international maritime law. Turkish protest highlight concerns that the conflict is expanding into areas previously considered isolated from direct military operations. [27] [35]
The campaign has also prompted increases in maritime insurance rates in the Black Sea and prompted some commercial shipping firms, including Turkish operator Besiktas Shipping, to suspend operations related to Russian trade due to security concerns. [29]
According to Wolff Heintschel von Heinegg of the European University Viadrina, Ukrainian strikes on vessels associated with Russia’s "shadow fleet" are assessed not under ordinary maritime law or sanctions enforcement, but under the law of armed conflict and the law of naval warfare, given the ongoing international armed conflict following the Russian invasion of Ukraine in 2022. Under these norms, belligerents may attack lawful military objectives and merchant vessels that make an effective contribution to the enemy’s military action outside neutral waters. [36]
Heintschel von Heinegg notes that while Gambian-flagged tankers like Kairos and Virat are prima facie neutral, they may be classified as enemy merchant vessels if they operate under the control or employment of the Russian government or serve Russia’s war-sustaining economic activities, such as transporting oil that funds military operations. This classification would render them lawful targets under recognized naval warfare doctrine. [36]
{{cite web}}: CS1 maint: url-status (link){{cite web}}: CS1 maint: multiple names: authors list (link){{cite web}}: CS1 maint: url-status (link){{cite web}}: |first= has generic name (help){{cite web}}: CS1 maint: url-status (link){{cite web}}: CS1 maint: multiple names: authors list (link){{cite web}}: CS1 maint: url-status (link)