Telecom security specialist ENEA has published a report highlighting how public 4G and 5G networks are increasingly integrated into modern drone operations during armed conflicts, particularly the Russia-Ukraine war. The analysis raises concerns about the vulnerability of civilian infrastructure and urges governments and mobile operators to implement targeted controls rather than broad shutdowns. Drones have emerged as a central element in contemporary warfare, especially in the ongoing Russia-Ukraine conflict. Initially used for reconnaissance and basic strikes, unmanned aerial vehicles (UAVs) now rely on commercial mobile networks for command, control, video feeds, and telemetry.
In Ukraine, drone connectivity has progressed from simple location services via 4G to more advanced applications, including real-time high-definition video transmission and full remote piloting over 5G networks. The report notes that 5G standards have evolved to formally support UAV integration, such as through non-terrestrial networks and enhanced connectivity features, which inadvertently broadens the potential for misuse in conflict scenarios.
A prominent example cited is Operation Spiderweb, executed by Ukraine's Security Service (SBU) on 1 June 2025. Coordinated drone strikes targeted multiple Russian air bases deep inside Russia, including Belaya, Dyagilevo, Ivanovo Severny, Olenya, and others. Drones, concealed in trucks and launched locally, were piloted remotely using Russia's domestic mobile networks via pre-installed SIM cards. This enabled over-the-horizon control, real-time video, and precise targeting, reportedly damaging or destroying strategic bombers like Tu-95 and Tu-22M3 models, along with other aircraft, causing significant financial and operational losses estimated in billions. The operation demonstrated how adversaries can exploit civilian 4G/LTE infrastructure for long-range, low-signature attacks without needing dedicated military communication links.
The report explains that as drones become more reliant on commercial networks, operators face heightened risks during crises. Malicious UAVs can blend with legitimate traffic, complicating detection and mitigation. Broad network shutdowns, as seen in some Russian regions to counter drone navigation, disrupt civilian services, economic activity, and emergency communications, creating disproportionate collateral damage. ENEA warns that governments may confront a difficult decision: implement precise, targeted network interventions or resort to blunt-force measures like widespread blackouts. The proliferation of 5G-capable drones accelerates this threat, as higher bandwidth and lower latency enable more sophisticated operations.
To mitigate these risks without crippling public services, the report advocates proactive measures. Mobile operators should enhance monitoring for anomalous patterns indicative of drone control traffic, deploy advanced detection tools, and collaborate with authorities on selective disruption capabilities.
Policymakers are encouraged to develop regulatory frameworks for emergency network controls, invest in counter-UAV technologies, and promote international standards for secure drone integration that account for security threats. The EU's recent Action Plan on Drone and Counter-Drone Security, released on 11 February 2026, aligns with these concerns by prioritizing improved detection using AI and 5G, coordinated responses, and risk assessments to protect critical infrastructure. ENEA emphasizes that addressing this convergence of civilian telecom and military drone use requires balanced, forward-thinking strategies to preserve network integrity while countering emerging threats.
Red Sky Alliance is a Cyber Threat Analysis and Intelligence Service organization. For questions, comments or assistance, please contact the office directly at 1-844-492-7225, or feedback@redskyalliance.com
Weekly Cyber Intelligence Briefings:
- Reporting: https://www. redskyalliance. org/
- Website: https://www. redskyalliance. com/
- LinkedIn: https://www. linkedin. com/company/64265941
Weekly Cyber Intelligence Briefings:
REDSHORTS - Weekly Cyber Intelligence Briefings
https://attendee.gotowebinar.com/register/5504229295967742989
Comments