Ukrainian resistance witches: how the secret intelligence network at the TOT works, - The Atlantic

Ukrainian women have become central figures in the covert intelligence network operating within Russia-occupied territories, playing a crucial role in gathering critical information for Ukrainian forces. These women, symbolically referred to as “witches” in underground circles, are leveraging their positions in civilian administration, healthcare, and education—sectors where Russian occupiers often expect them to remain passive—to infiltrate and extract valuable data. Their work has evolved significantly since the early days of the war, when open demonstrations were common but now face severe repression.

The transformation of resistance efforts into a highly secretive and lethal intelligence operation was driven by the harsh measures imposed by Russian authorities. Surveillance cameras equipped with facial recognition technology, regular polygraph tests, and widespread fear of punishment have forced underground networks to abandon public activism. In cities such as Mariupol and parts of Kherson Oblast, any display of pro-Ukrainian sentiment can result in brutal reprisals in basements or other hidden locations. As a result, civilian agents have transitioned from symbolic acts of defiance to professional espionage, becoming the first line in coordinating the “middle strikes”—regular drone attacks targeting command posts, logistics hubs, and residential areas of Russian military personnel.

A significant component of this intelligence effort involves the use of internet subterfuge and cyber espionage. Ukrainian operatives on occupied territory create fake profiles on messaging platforms to establish romantic relationships with Russian occupiers, particularly members of Chechen units, who are more susceptible to manipulation. These interactions yield photographs of military installations and facilities, which are then analyzed to determine target coordinates. Drone strikes sometimes occur during these online conversations, exploiting the psychological vulnerability of the Russian soldiers involved.

To evade detection, the intelligence network relies heavily on strict secrecy and countermeasures against Russian electronic warfare systems and monitoring. Occupying forces have completely blocked access to Ukrainian mobile operators and mandated the use of local SIM cards and devices pre-installed with the “Druzhba” spyware, which secretly transmits all user data, location information, and images back to Russian intelligence agencies. To circumvent this surveillance, underground operatives use “clean” phones, smuggled in from free Ukrainian territory. Messages are created without SIM cards and sent via encrypted channels using Wi-Fi access points from other devices already integrated into the occupied network.

Training for civilian informants includes printed guides disguised as ordinary art books and specialized courses on resisting polygraphs and urban observation techniques. Additionally, there is a strict ban on involving minors in intelligence operations due to the extreme risks to their lives and the potential moral damage to operational units should they be captured. Verification of collected coordinates is also carried out by Ukrainian refugees abroad, who possess detailed knowledge of their hometowns' infrastructure.

Participants in the resistance emphasize that some details of their activities are deliberately revealed to instill constant paranoia among Russian troops, making them wary of every local resident. They argue that the scale of Russian wartime crimes and the trauma of occupation make any compromise with territorial concessions impossible. This mindset underscores the determination of the Ukrainian resistance to continue its fight under increasingly dangerous conditions.

As the situation on the front lines continues to evolve, the role of these women remains vital. Their ability to blend into everyday life while conducting high-stakes intelligence work highlights both the ingenuity and resilience of the Ukrainian people in the face of overwhelming adversity. The ongoing conflict demands continued support and resources to sustain such efforts, ensuring that the resistance can adapt and thrive despite the ever-present dangers.