Ukrainian hacktivists of the Cyber Resistance group handed over to InformNapalm volunteer intelligence community exclusive data from the mailbox of Maxim Okss, a former air force officer and now a “civilian” pilot in command of the Ilyushin IL-76 transport aircraft of the sanctioned Aviacon Zitotrans airline. The contents of his mailbox reveal information about Russian airlines operating airlifts of weapons, ammunition and sanctioned goods from Iran, South Africa, and Mali to Russia.
COMMANDER OF MILITARY UNIT 41495
Okss Maxim Igorevich [Rus.: Окcс Максим Игоревич], born July 18, 1977, domestic passport # 45 21 705316, issued on August 10, 2022, TIN: 370201681553. Registered at: Moscow city, 11 Sinyavinskaya st., building 9, apt. 93.
He was born in Dresden, studied in Russia, but in all the documents requiring the ethnicity he indicates it as “Ukrainian”. The retrieved data makes it clear that this ethnic Ukrainian contributes to the continued Russian aggression against his historical homeland.
His military career does not merit a detailed description. He served in military transport aviation, rose through the ranks to become the commander of the 566th Separate Military Transport Aviation Regiment, military unit 41495, stationed in the town of Seshcha, Bryansk Oblast.
Comrade Colonel did not distinguish himself with anything noteworthy there. Interestingly, his mail dump contained building layouts for his new country house with a stand-alone sauna, alongside with the results of an internal audit of his military unit, which recorded facts of inventory shortages and theft.
In 2018, Colonel Okss was transferred to the position of a chief of service – senior inspector-pilot of the flight safety service of the of the Military Transport Aviation Command Headquarters (Staff), military unit 25969 (Moscow, Matrosskaya Tishina-10). But he did not last long there and was dismissed from office with the following wording: “Not fit for the position held. It is not advisable to appoint for flight operations.”
Colonel Okss left the military service and, having experience in piloting IL-76 transport aircraft, went into civil aviation.
“HUMANITARIAN AID” FROM IRAN
Okss’s first civilian employment was at ALROSA Airlines, but in May 2021 he switched to the Aviation Rescue Company of the Ministry of Emercom of Russia.
This state-owned aviation enterprise does not exclusively do rescue operations, but offers a wider range of services. VIP and corporate transportation of passengers is very relevant for remote rotational camps in Russia, as is sanitary evacuation from the taiga or permafrost areas. However, this company also carries out freight transportation.
Among a bunch of technical documentation, hacktivists found data about a flight operated by this airline on February 6, 2023 on the route Moscow (Zhukovsky Airport) – Urmia (Iran).
Urmia is the capital of the Iranian of West Azerbaijan province. Tellingly, just a week before this flight, there were media reports about an attack by the Israeli army on Iranian weapons factories. Thus, explosions were reported in the Shahid Salimi industrial zone in the neighboring province of East Azerbaijan. According to the map, this industrial zone is only an hour and a half drive from Urmia where the Russian freighter landed.
What kind of cargo did the Russians take there? Documents from ex-colonel’s mail indicate that it was definitely not “humanitarian” in nature, as indicated on the flight summary.
Also, thanks to the pilot duty rosters, we know that the IL-76 aircraft of this airline operated flights to Africa and Syria.
With Syria, everything is obvious – there were flights to Latakia and the Russian Khmeimim airbase to transport cargo for Russian troops there. All flights to Syrian bases are highlighted in gray in the roster, indicating a government order. For example, in February 2023 alone there were 13 such flights to Syria.
There are also commercial flights to Bamako, the capital of Mali, on the flight rosters. It is well known that there is a significant Russian presence in Mali, notably of the former Wagner Group. Apparently, it was the Wagner PMC that was the “commercial” customer. It’s no surprise that the number of flights to Bamako went through the roof in June 2023. There is a separate document in the mail dump with flight routings and aircraft loading.
Thus, from June 21 to 22, a number of flights were made along the route Ramenskoye – Krasnodar – Latakia – Bamako – Latakia – Bamako – Latakia – Bamako – Latakia – Krasnodar – Ramenskoye. Such an increase in activity is quite an interesting coincidence, given that Prigozhin’s putsch took place on June 23 and 24, 2023.
Somewhere in August or September, Okss transferred to the private sanctioned cargo airline Aviacon Zitotrans, which carried out cargo transportation for sanctioned Russian military industry companies. As indicated in the register of sanctioned legal entities and individuals on the website of the NAPC of Ukraine, Aviacon Zitotrans delivers military materiel such as missiles, warheads and helicopter parts around the world. For example, Aviacon Zitotrans delivered military cargoes to Africa, Venezuela, and other countries. As an example of their efforts, as of September 2022, Aviacon Zitotrans was attempting to use a Turkish company and Turkish diplomats to facilitate the sale of Russian military equipment abroad on behalf of OJSC Rosoboronexport, a state-owned Russian military industry company sanctioned by the United States.
Therefore, Okss’ flight roster is interrupted in August. However, we detected the flight of another crew on August 03, 2023 to Cape Town.
And already in September, South African President Ramaphosa stated that an independent expert group had found no evidence that any Russian ship was transporting weapons from South Africa for Russia in May 2023. This may well be true, because the weapons were delivered not by sea, but by air. With transport airplanes of the Ministry of Emergency Situations of the Russian Federation.
The Cyber Resistance group handed over documents with the cargo specification to the competent authorities; this information is not yet subject to publication. The contents of the Okss’ mailbox once again prove that Russia is not only ramping up its own weapons production, but also sourcing the weapons from all over the world to pursue its criminal war of attrition against Ukraine.
Russia is a proven international aggressor with a track record of attacking several countries, unlikely to stop with Ukraine. Therefore, the issue of support for Ukraine by the West with weapons and ammunition, aircraft and tanks, missiles and drones, is a matter of security for the whole democratic world.
Read more publications based on the data from Cyber Resistance hacktivists
- Hacking a Russian war criminal, deputy commander of the OMON of the Krasnoyarsk Krai
- Hacking a Russian war criminal, commander of 960th Assault Aviation Regiment
- Hacking Russian Z-volunteer Mikhail Luchin who ordered sex toys for $25,000 instead of drones for the Russian army.
- BagdasarovLeaks: hacking ex-member of the Russian State Duma Semyon Bagdasarov. Iranian gambit
- Hacked: Russian GRU officer wanted by the FBI, leader of the hacker group APT 28
- Hacking “James Bond”: medical service commander of 960th Assault Aviation Regiment doxed key personnel of his own unit
- Hacking Andrey Lugovoy, member of the Russian State Duma, First Deputy Head of the Security Committee
- Ukrainian hacktivists acquired first-ever photo of the GRU hacker unit commander wanted by the FBI for meddling in the U.S. election
- New evidence of collaboration of former Slovak Justice Minister Štefan Harabin with the Russian Federation
- Hacking Colonel Leonid Rusin, ex-commander of Russian AWACS unit
- Ukrainian hackers posted lists and documents of the Russian 72nd Motorized Rifle Brigade (TOP-10 files)
- Economic summit Russia–Africa 2023 databases hacked by Ukrainian hacktivists
- Hacking Lieutenant Colonel Kasatkin, Russian war criminal, head of Combat Training of A-50 early warning aircraft, military unit 41520
- BabakovLeaks: hacking Alexander Babakov, Deputy Chairman of the Russian State Duma
- Cuban mercenaries fighting against Ukraine on the Russian side – Ukrainian hacktivists collected evidence