A novel GNSS-jamming campaign has been detected across the South Baltic Sea, severely disrupting satellite navigation signals over a large area including Denmark's Bornholm in October 2024.

Cyber & Information WarfareCyber AttacksAttacks on critical infrastructure (energy, transport, hospitals)

Aggressor

Summary

Since 2024, the South Baltic Sea region has experienced an unprecedented and extensive GNSS (Global Navigation Satellite System) jamming campaign impacting multiple satellite signal bands, causing widespread degradation of navigation signals. The attacks intensified around Bornholm, Denmark, coinciding with a major political event involving Denmark's elite and 100,000 visitors. Data analysis from various RINEX GNSS observation stations revealed that all GNSS bands, including BeiDou (not illustrated), were affected, with an expanded frequency range targeted in late 2024. The jammer's range is too large to be explained by a single ground-based transmitter, suggesting either multiple distributed jammers stationed near shores of Denmark and Sweden or jamming directed at the GNSS satellites themselves, with Russia identified as the likely aggressor based on historical patterns. These attacks have caused real-world operational impacts, with Baltic Sea ships reporting complete GPS signal losses. This sophisticated cyber-kinetic interference threatens regional maritime safety and security, likely representing hostile Russian hybrid warfare activity targeting vital navigation infrastructure. NATO is presumed to be actively developing anti-jamming countermeasures. The precise attacker attribution remains unconfirmed but strongly suspected. Official GNSS monitoring repositories were used for analysis. The attack represents a clear aggression targeting critical infrastructure in cyberspace domain.

Classification

Confidence: High

The thread clearly documents a large-scale hostile GNSS jamming campaign disrupting satellite navigation across the Baltic Sea, with Russia named as the prime suspected aggressor. The event describes hostile interference targeting critical infrastructure, fitting the aggressor event definition in cyberspace. There is no indication of defensive or countermeasure actions described, so defense prep is false.

Source URL

https://x.com/i/web/status/1939300191615561860

Open source

Provenance

Publisher: admin_quick
Submitted: Feb 1, 2026, 00:14 UTC
Last updated: Nov 8, 2026, 23:44 UTC
Event time: Oct 18, 2024, 00:00 UTC

Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.

Raw record

{
  "id": "66996bf0-e92b-4640-9b8a-1f3fcf7f5d75",
  "url": "https://x.com/i/web/status/1939300191615561860",
  "source": "admin_quick",
  "status": "approved",
  "category": "Cyber & Information Warfare",
  "subcategory": "Cyber Attacks",
  "incident_type": "Attacks on critical infrastructure (energy, transport, hospitals)",
  "country": "Denmark",
  "source_reliability": "C",
  "info_credibility": "3",
  "tags": [
    "GNSS jamming",
    "Baltic Sea",
    "Denmark",
    "Bornholm",
    "satellite navigation",
    "cyber attacks",
    "Russia",
    "hybrid warfare"
  ],
  "nodes": [],
  "countries": [],
  "where_text": "Cyberspace",
  "headline": null,
  "description": "In October 2024, a novel and intensified GNSS-jamming campaign impacted the South Baltic Sea region, including around Denmark's Bornholm island. The attacks caused deep degradation of satellite navigation signals across all GNSS frequency bands, affecting maritime navigation and safety. Analysis of RINEX station data from multiple repositories showed geographic spread reaching beyond what a single ground jammer could achieve, indicating either distributed coastal jammers or satellite-level interference. The Bornholm station was notably impacted during a major political event involving Denmark's political elite and large visitorship. The jamming affected multiple satellite constellations simultaneously, with signal noise-to-ratio degradation confirming sustained attacks. Historical context and pattern suggest Russia as the likely aggressor in this hybrid warfare operation, targeting critical navigation infrastructure in the Baltic Sea. These jamming attacks caused real-world maritime impacts, with ships reporting GPS outages. Although the exact source attribution is unconfirmed, the scale, sophistication, and timing align with hostile Russian hybrid activities. NATO is reportedly working on anti-jamming defenses. Multiple official GNSS signal data sources were used for the analysis, including swepos-open.lantmateriet.se and epncb.eu.",
  "summary_short": "A novel GNSS-jamming campaign has been detected across the South Baltic Sea, severely disrupting satellite navigation signals over a large area including Denmark's Bornholm in October 2024.",
  "summary_extended": "Since 2024, the South Baltic Sea region has experienced an unprecedented and extensive GNSS (Global Navigation Satellite System) jamming campaign impacting multiple satellite signal bands, causing widespread degradation of navigation signals. The attacks intensified around Bornholm, Denmark, coinciding with a major political event involving Denmark's elite and 100,000 visitors. Data analysis from various RINEX GNSS observation stations revealed that all GNSS bands, including BeiDou (not illustrated), were affected, with an expanded frequency range targeted in late 2024. The jammer's range is too large to be explained by a single ground-based transmitter, suggesting either multiple distributed jammers stationed near shores of Denmark and Sweden or jamming directed at the GNSS satellites themselves, with Russia identified as the likely aggressor based on historical patterns. These attacks have caused real-world operational impacts, with Baltic Sea ships reporting complete GPS signal losses. This sophisticated cyber-kinetic interference threatens regional maritime safety and security, likely representing hostile Russian hybrid warfare activity targeting vital navigation infrastructure. NATO is presumed to be actively developing anti-jamming countermeasures. The precise attacker attribution remains unconfirmed but strongly suspected. Official GNSS monitoring repositories were used for analysis. The attack represents a clear aggression targeting critical infrastructure in cyberspace domain.",
  "actor_primary": "Russia",
  "target_primary": null,
  "location_text": "South Baltic Sea, including Bornholm",
  "location_region": null,
  "location_coordinates_lat": 56.26392,
  "location_coordinates_lon": 9.501785,
  "location_precision": "Regional",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The thread clearly documents a large-scale hostile GNSS jamming campaign disrupting satellite navigation across the Baltic Sea, with Russia named as the prime suspected aggressor. The event describes hostile interference targeting critical infrastructure, fitting the aggressor event definition in cyberspace. There is no indication of defensive or countermeasure actions described, so defense prep is false.",
  "event_time_utc": "2024-10-18T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "unknown",
  "created_at": "2026-02-01T00:14:35.229Z",
  "updated_at": "2026-11-08T23:44:37.928Z",
  "reliability_band": "strong",
  "location_precision_band": "regional",
  "time_precision_band": "unknown",
  "severity_band": "moderate",
  "attribution_confidence_band": "medium",
  "attribution_basis": "single_source"
}

Public assessmentReliability: StrongSeverity: ModerateAttribution: MediumSingle sourceTime: UnknownLocation: Regional

Source reliability

Info credibility

Event time

Oct 18, 2024, 00:00 UTC

Event time confidence

unknown

Location

South Baltic Sea, including Bornholm

Primary actor

Russia

Country

Denmark

Tags

GNSS jamming, Baltic Sea, Denmark, Bornholm, satellite navigation, cyber attacks, Russia, hybrid warfare

Loading signal...

{ "id": "66996bf0-e92b-4640-9b8a-1f3fcf7f5d75", "url": "https://x.com/i/web/status/1939300191615561860", "source": "admin_quick", "status": "approved", "category": "Cyber & Information Warfare", "subcategory": "Cyber Attacks", "incident_type": "Attacks on critical infrastructure (energy, transport, hospitals)", "country": "Denmark", "source_reliability": "C", "info_credibility": "3", "tags": [ "GNSS jamming", "Baltic Sea", "Denmark", "Bornholm", "satellite navigation", "cyber attacks", "Russia", "hybrid warfare" ], "nodes": [], "countries": [], "where_text": "Cyberspace", "headline": null, "description": "In October 2024, a novel and intensified GNSS-jamming campaign impacted the South Baltic Sea region, including around Denmark's Bornholm island. The attacks caused deep degradation of satellite navigation signals across all GNSS frequency bands, affecting maritime navigation and safety. Analysis of RINEX station data from multiple repositories showed geographic spread reaching beyond what a single ground jammer could achieve, indicating either distributed coastal jammers or satellite-level interference. The Bornholm station was notably impacted during a major political event involving Denmark's political elite and large visitorship. The jamming affected multiple satellite constellations simultaneously, with signal noise-to-ratio degradation confirming sustained attacks. Historical context and pattern suggest Russia as the likely aggressor in this hybrid warfare operation, targeting critical navigation infrastructure in the Baltic Sea. These jamming attacks caused real-world maritime impacts, with ships reporting GPS outages. Although the exact source attribution is unconfirmed, the scale, sophistication, and timing align with hostile Russian hybrid activities. NATO is reportedly working on anti-jamming defenses. Multiple official GNSS signal data sources were used for the analysis, including swepos-open.lantmateriet.se and epncb.eu.", "summary_short": "A novel GNSS-jamming campaign has been detected across the South Baltic Sea, severely disrupting satellite navigation signals over a large area including Denmark's Bornholm in October 2024.", "summary_extended": "Since 2024, the South Baltic Sea region has experienced an unprecedented and extensive GNSS (Global Navigation Satellite System) jamming campaign impacting multiple satellite signal bands, causing widespread degradation of navigation signals. The attacks intensified around Bornholm, Denmark, coinciding with a major political event involving Denmark's elite and 100,000 visitors. Data analysis from various RINEX GNSS observation stations revealed that all GNSS bands, including BeiDou (not illustrated), were affected, with an expanded frequency range targeted in late 2024. The jammer's range is too large to be explained by a single ground-based transmitter, suggesting either multiple distributed jammers stationed near shores of Denmark and Sweden or jamming directed at the GNSS satellites themselves, with Russia identified as the likely aggressor based on historical patterns. These attacks have caused real-world operational impacts, with Baltic Sea ships reporting complete GPS signal losses. This sophisticated cyber-kinetic interference threatens regional maritime safety and security, likely representing hostile Russian hybrid warfare activity targeting vital navigation infrastructure. NATO is presumed to be actively developing anti-jamming countermeasures. The precise attacker attribution remains unconfirmed but strongly suspected. Official GNSS monitoring repositories were used for analysis. The attack represents a clear aggression targeting critical infrastructure in cyberspace domain.", "actor_primary": "Russia", "target_primary": null, "location_text": "South Baltic Sea, including Bornholm", "location_region": null, "location_coordinates_lat": 56.26392, "location_coordinates_lon": 9.501785, "location_precision": "Regional", "is_aggressor_signal": true, "signal_type": "HYBRID_SIGNAL", "is_hybrid_war_signal": true, "classification_complete": true, "hybrid_signal_complete": true, "classification_confidence": "High", "classification_rationale": "The thread clearly documents a large-scale hostile GNSS jamming campaign disrupting satellite navigation across the Baltic Sea, with Russia named as the prime suspected aggressor. The event describes hostile interference targeting critical infrastructure, fitting the aggressor event definition in cyberspace. There is no indication of defensive or countermeasure actions described, so defense prep is false.", "event_time_utc": "2024-10-18T00:00:00.000Z", "end_time_utc": null, "event_time_confidence": "unknown", "created_at": "2026-02-01T00:14:35.229Z", "updated_at": "2026-11-08T23:44:37.928Z", "reliability_band": "strong", "location_precision_band": "regional", "time_precision_band": "unknown", "severity_band": "moderate", "attribution_confidence_band": "medium", "attribution_basis": "single_source" }