Ukrainian attacks on Russian vessels, including oil tankers from the "Russian shadow fleet", are actions conducted by the Security Service of Ukraine (SBU) targeting Russia-linked ships. Primarily carried out in the Black Sea and Mediterranean Sea, these strikes represent a significant escalation of Ukraine's maritime warfare strategy. Among their targets are vessels allegedly used to circumvent international sanctions on Russian energy exports.
Background
Ukraine has conducted maritime operations against Russian forces since the 2022 invasion. However, 2025 marked a dramatic shift in scale and geographic scope, with Ukraine developing and deploying advanced unmanned naval systems known as "Sea Baby" and "Sub Sea Baby" drones. The campaign focused on two primary objectives: degrading the Russian Black Sea Fleet and disrupting Russia's "shadow fleet" — a network of roughly 1,000 vessels used to transport Russian oil in violation of Western sanctions and the G7 oil price cap.
According to a report by The Atlantic, citing U.S. and Ukrainian officials, the Trump administration did not object to the Ukrainian strikes on the "shadow fleet", and approved assistance for the strikes, with the US considering the strikes an "important tool" to put pressure on the Kremlin to negotiate peace. The publication details that Donald Trump did not object to attacks on Russian oil logistics in international waters and, in several instances, approved sharing intelligence with Kyiv. This intelligence was subsequently used to target Russian oil infrastructure.
Maritime sabotage
Multiple vessels which had recently called at Russian ports have been attacked with limpet mines or underwater explosives in the Mediterranean, many operated by Athens-based shipping company Thenamaris.
A report from the security company Ambrey concludes that the attacks were perpetrated by "an unnamed state actor targeting ships calling at oil ports" likely using limpet mines with delay action planted by divers using small submarines. Two vessels were sunk, the 9500 ton freighter Ursa Major off Spain on 24 December 2024 and the 164000 ton super tanker Koala while moored at Ust-Luga, Leningrad Oblast, on 9 February 2025 and three others, Seajewel, Seacharm and Grace Ferrum were damaged.
Despite the lack of concrete evidence or official results from investigations, the repeated targeting of ships associated with Russian trade has led security analysts and maritime industry bodies to privately assess a probable link to the ongoing war in Ukraine. Despite the fact that the Ambrey report attributed the attacks to an unspecified state actor without naming Ukraine, private discussions among security professionals from both private firms and government agencies have frequently identified Ukrainian actors as the most likely perpetrators.
According to Lloyd's List, U.S. is believed to have used diplomatic backchannels to convey a warning to the Ukrainian government in early 2025. The message reportedly indicated that if Ukraine had any involvement in the attacks, such operations should be halted immediately.
Former Royal Navy officer Tom Sharpe believes that the series of targeted explosions on tankers exporting Russian oil is very likely carried out by Ukrainian special operations forces using limpet mines as a tool of precise sabotage. He assesses these operations as a form of highly effective unconventional warfare that hits the infrastructure supporting Russia's oil revenues without causing direct escalation to open conflict with the West.
Confirmed and suspected operations
2025
On 29 November 2025, Ukraine claimed responsibility for striking two Russian "shadow fleet" tankers, the Kairos and Virat, using Sea Baby naval drones equipped with enhanced warheads. Both vessels, flagged to Gambia and previously sanctioned by the United States, European Union, and United Kingdom, were en route to the Russian port of Novorossiysk when struck approximately 28 to 35 nautical miles (52 to 65 km; 32 to 40 mi) off Turkey's northern coast. The Kairos sustained critical damage and caught fire, with its 25-member crew evacuated safely. The Virat was struck again the following morning, suffering minor damage above the waterline. Neither vessel was carrying cargo at the time of the attacks.
On 2 December, the Turkish company Besiktas Shipping said that it was "ceasing all shipping operations involving Russian interests" after one of its vessels, Mersin, was damaged by four explosions the previous week near Dakar. The cause of the explosions were reported as unclear.
On the same day, the tanker Midvolga 2 came under attack approximately 80 nautical miles (about 148 km) off the coast of Turkey. The vessel was en route from Russia to Georgia, carrying a shipment of sunflower oil. Regional security sources cited by Lloyd's List reported that the tanker was likely struck by a shrapnel-equipped drone, an attack which injured the master and the second engineer. Ukraine's Ministry of Foreign Affairs stated that the country "has nothing to do with this incident" and accused Russia of staging it.
On 10 December, Ukrainian forces attacked the tanker Dashan (formerly called Eurochampion) in the Black Sea, while it was on its way to Novorossiysk with its transponders turned off. The vessel was apparently damaged in the stern section by several naval drones. On 17 December 2024 the tanker was put under sanction by the EU. A spokesman for Ukraine's SBU stated: "The SBU is actively pursuing measures to diminish petrodollar income to the Russian budget. This is the third tanker from the shadow fleet rendered inoperative in the last two weeks, which had been aiding the Kremlin in bypassing international sanctions".
On 18 December, Ukraine performed its first claimed attack on a Russian vessel in the Mediterranean Sea. The target was the Qendil, an Omani-flagged "shadow fleet" tanker allegedly used by Russia to circumvent sanctions. The strike, conducted using aerial bomber style drones around was, according to Lloyd's List Intelligence, most likely carried out between Crete and Malta. The attack reportedly caused critical damage, rendering the vessel inoperable. The SBU confirmed the Qendil was not carrying oil at the time of the attack, mitigating environmental risks. An unnamed SBU source told Business Insider: "Russia used the Qendil to circumvent sanctions and earn money that went to the war against Ukraine... The enemy must understand that Ukraine will not stop and will beat him anywhere in the world, wherever he is". According to RFI sources, the attack was carried out by a drone launched from Misrata.
2026
On 8 January 2026, a Russian "shadow fleet" oil tanker, the Elbus, was struck by a drone off the coast of Turkey. According to the ASTRA Telegram channel the tanker was headed to Novorossiysk. The Elbus "sustained damage, but no crew members were injured".
On 3 March, the Russian-flagged liquefied natural gas tanker MV Arctic Metagaz, which was under U.S. and UK sanctions and reportedly associated with Russia's shadow fleet, caught fire with 62,000 tons of LNG. As of 14 March, it is adrift with a severe list and large holes in the side, and much of the hull has burn damage. It floats in the central Mediterranean Sea southeast of Malta. According to shipping security firm EOS Risk Group and other maritime sources, the tanker may have been struck by a drone after departing Murmansk with cargo bound for Suez. Reuters quoted a security source stating that Ukraine is suspected of carrying out the operation. Russia stated that all 30 crew members had been rescued and claimed that the tanker, which it said was carrying cargo "documented in accordance with all international regulations", had been attacked by Ukrainian uncrewed boats operating from Libya. Russia's Ministry of Transport described the incident as an act of "international terrorism and maritime piracy". According to an investigation by RFI, the Arctic Metagaz was attacked by a Ukrainian-made Magura V5 surface drone, which was launched from the Libyan coast near Mellitah and struck the vessel's engine room.
On 10 June, Ukraine struck a Russian shadow fleet WEST Horizon tanker in the Black Sea.
Operation MoLoChKa
Starting from 6 July 2026, the Unmanned Systems Forces of Ukraine carried out multi-day operation, referred to as "Operation MoLoChKa" on Russian shadow fleet ships in the Sea of Azov, with over 100 vessels hit. On 15 July 2026, Robert Brovdi said that the Sea of Azov chapter of the operation had extended to the Black Sea.
On 6 October 2026 Russian media reported the tanker Aframax Rio (IMO 9273844) had been hit off the coast near Sochi by naval drones. The vessel was listed by Ukraine as a shadow fleet tanker. From a nearby shore a large patch of burning oil was visible behind the ship. The crew of 23, consisting exclusively of Indian citizens, was rescued.
Weapons
Sea Baby naval drones
The Sea Baby is an unmanned surface vessel developed and operated by Ukraine's SBU. The upgraded variant unveiled in October 2025 features an operational range of 1,500 kilometres (930 miles) and can carry payloads of up to 2,000 kilograms (4,400 pounds). Specifications include a length of 6 metres, width of 2 metres, and maximum speed of 49 knots. The platform supports multiple weaponized variants, including a gyro-stabilized remote machine gun with automatic target recognition and a ten-tube Grad-class multiple rocket launcher. Advanced features include AI-assisted targeting systems, the ability to launch reconnaissance drones, and layered self-destruct mechanisms.
The Sea Baby platform is designed for reusability rather than single-use attrition, with operations controlled from mobile command nodes. Development has been partially financed through the UNITED24 public fundraising platform, reflecting a distributed civil-military approach to wartime production.
Sub Sea Baby underwater drones
The Sub Sea Baby represents an evolution of Sea Baby technology for underwater operations. These drones executed the 15 December 2025 submarine strike, marking the first known use of underwater drones to attack a submerged or port-based submarine target.
One way attack drones
Vessels were hit by guided mid range one way drones, including the FP-1 and FP-2 drones by Firepoint.
Reactions
Turkey
Turkey condemned the attacks, citing threats to maritime safety and environmental protection. Foreign Ministry spokesman Oncu Keceli stated that the 29 November attacks "have posed serious risks to navigation, life, property and environmental safety in the region," and noted that the strikes occurred within Turkey's exclusive economic zone. Turkish foreign minister Hakan Fidan characterized the attacks as "very scary" and warned that they demonstrated the war's expanding reach. Turkey emphasized the necessity of suspending attacks on port and energy infrastructure in the Black Sea.
Russia
Russia's foreign ministry condemned the attacks as "acts of terrorism" that threatened maritime freedom of navigation. Russian president Vladimir Putin issued explicit threats in response, stating on 2 December 2025: "The most extreme measure would be to isolate Ukraine from the sea, which would fundamentally eliminate the possibility of piracy". Putin threatened to escalate strikes against Ukrainian ports and shipping infrastructure. However, Russia denied Ukrainian claims regarding the submarine strike, with Black Sea Fleet spokesman Alexei Rulev stating the underwater attack "failed".
On 11–12 December 2025, Russia conducted retaliatory strikes, launching a Shahed kamikaze drone at the Turkish-owned cargo ship CENK-T in Chornomorsk port, reportedly in direct retaliation for Ukrainian attacks on Russian tankers. Although the strike caused minimal damage to the vessel, it demonstrated Russian willingness to escalate strikes on Ukrainian ports.
Ukraine
Ukrainian president Volodymyr Zelenskyy characterized Russian retaliation as evidence of Moscow's rejection of peace negotiations. In his statement following the CENK-T attack, he declared: "This demonstrates yet again that the Russians not only disregard the current diplomatic opportunities but also persist in their efforts to undermine normalcy in Ukraine". Ukrainian officials argued that attacks on "shadow fleet" tankers represent legitimate targeting of infrastructure used to fund Russia's war effort.