On the 13th of October 2026, at 01:02 UTC, the TB JINJIANG (MMSI 636024184) broadcast a distress call reporting a collision in the Persian Gulf. The call did not identify the other vessel involved. SynMax’s maritime domain awareness platform, Theia, identified the second vessel as the PHOTINI (MMSI 538013060). Copernicus Sentinel imagery from the 14th, 15th, 17th, and 19th of October shows the two vessels in continued contact at the same point, with the PHOTINI’s bow positioned against the TB JINJIANG’s aft starboard gunwale. Throughout the sequence, the pair swings together as a single unit, indicating it is highly likely that the PHOTINI’s bow is embedded in the TB JINJIANG’s hull. AIS shows that the TB JINJIANG was at anchor at the time of the collision. No transmissions were received from the PHOTINI during the collision window. Before that, her last transmission was received off Mumbai, India, on the 8th of October, and she resumed on the 13th of October after the TB JINJIANG sent a distress signal. Crew-input draft data suggests that both vessels were empty at the time of impact. The cause of the collision and the condition of both vessels have not yet been determined. Theia automatically analyzes more than 40 million km² of satellite imagery daily, fusing it with global AIS and other intelligence sources to detect, identify, and track tens of thousands of vessels, providing ground truth for vessel movements regardless of AIS output.

On the 23rd of September 2026, SynMax's maritime domain awareness platform, Theia, detected and tip-and-cued high-resolution satellite imagery of the NING FENG LENG 2 (IMO 1026697), a 157-meter Chinese-flagged reefer, engaged in a ship-to-ship transfer with an unidentified squid jigger just outside of the exclusive economic zones (EEZs) of Peru and Chile (-15.8541, -80.9254). At the time of capture, AIS location data was not received from either vessel. The interaction between the two vessels is consistent with the resupply of personnel or provisions and the transshipment of catch at sea, practices that allow distant-water fleets to remain active near fishing grounds for extended periods and complicate the traceability of fish products. Tracking support vessels such as reefers enables analysts to identify the vessels, ports, and markets through which IUU (illegal, unreported, and unregulated) fish enter the supply chain, allowing enforcement to focus on a small number of high-value nodes rather than thousands of individual fishing vessels.  Theia ingests more than 40 million km² of satellite imagery daily, fusing it with global AIS and additional datasets to automatically detect, identify, and track tens of thousands of vessels across oceans, regardless of AIS output. Atlas, SynMax's Agentic AI, extends this further, enabling analysts to interrogate Theia's pre-processed datasets, generate network charts, and explore links between vessels, such as repeated rendezvous between support vessels and fishing fleets, shared patterns of life, and changes of identity, to map the networks behind transshipment activity at scale.

It's fantastic to be in Troia, Portugal for Defence IQ's Maritime ISR conference! If you're attending and would like to discuss our latest developments in maritime domain awareness, AI, and geointelligence, please don't hesitate to call in and speak to our team at Booth 8 in the North Foyer.

SynMax is delighted to be attending @DefenceIQ’s Maritime ISR conference in Troia, Portugal, next week on the 13th and 14th of October. Visit us at Booth 8 in the North Foyer to see SynMax’s maritime domain awareness platform, Theia, which automatically analyzes more than 40 million km² of satellite imagery daily, fusing it with global AIS, synthetic aperture radar (SAR), and additional datasets to detect, identify, and track tens of thousands of vessels, regardless of spoofing attempts or dark periods. The team will also be demonstrating Atlas, SynMax’s Agentic AI data science tool, which enables analysts to interrogate vast, pre-processed, auditable datasets with precision, extending human capacity and delivering decision-ready intelligence at pace. If you would like to arrange a meeting with our team during the event, please send us a message. We look forward to seeing you in Troia.

The KANG KON, North Korea's second Choe Hyon-class guided-missile destroyer, has had a troubled introduction to service. On the 21st of May 2025, the 145-meter warship partially capsized during a failed launch at Chongjin Shipyard. Despite this setback, she was refloated and has now entered service with Pyongyang's fleet. SynMax's maritime domain awareness platform, Theia, has tracked her journey from repair yard to active fleet assignment. Recently, Theia identified her alongside Rason, North Korea, on the 27th of August and the 3rd of September, and then detected her AIS dark, underway off North Korea's east coast on the 4th of September. Two days later, KCNA state media placed the vessel alongside at Wonsan, where Kim Jong Un presided over a commissioning ceremony and described the warship as capable of delivering a "deadly retaliatory strike." The ceremony took place the day before the US, South Korea, and Japan began a five-day joint military exercise, Freedom Edge, near Jeju Island. Theia subsequently repeatedly identified the KANG KON at the Mayang-do naval facility, a pattern consistent with a newly commissioned vessel joining the East Sea Fleet. Once the KANG KON’s pattern of life was established, high-resolution @Satellogic imagery was tasked on the 3rd of October. This showcases the value of using medium-resolution, high-frequency satellite coverage to flag a vessel of interest for tasked high-resolution follow-up, prioritizing imaging resources against validated targets rather than searching blindly. Theia fuses more than 40 million km² of daily satellite imagery with unclassified intelligence sources to automatically detect, identify, and track vessels regardless of their AIS status, enabling rapid response to the movement of high-value targets. SynMax's Agentic AI, Atlas, can be used to track dark vessels by bringing together satellite detections and open-source reporting to accelerate identification and reduce analyst workload.

On the 13th of August 2026, SynMax's maritime domain awareness platform, Theia, detected the sanctioned tanker ZALIV VOSTOK (IMO 9360130) alongside the FSU UMBA, a sanctioned floating storage unit used for the storage and transfer of Russian crude oil, at anchor in Kola Bay, Russia. The two vessels were assessed to be conducting a ship-to-ship (STS) transfer. The following day, the ZALIV VOSTOK was imaged departing Kola Bay. Approximately four weeks later, on the 11th of September, Theia identified her again, this time in the Sea of Japan south of Nakhodka, Russia, alongside the sanctioned Sierra Leone-flagged tanker CECILA (IMO 9247792). Again, the behavior of the two vessels was consistent with a STS transfer. AIS data was not received from either vessel during the operation. Following the interaction, the CECILA made for Qingdao Port, China, where she was imaged alongside on the 18th of September. Theia was able to track the ZALIV VOSTOK and the CECILA by automatically fusing more than 40 million km² of daily satellite imagery with AIS and SAR data, among others, rather than relying on any single source. SynMax's Agentic AI platform, Atlas, allows analysts to surface suspicious behavior globally, alerting analysts to vessels of interest in near real time and carrying the analysis forward when the transponders go quiet.

UPDATE: Following our previous coverage of the KOSATKA's (IMO 1011551) movements from Severomorsk to Severodvinsk (link in comments), SynMax's maritime domain awareness platform, Theia, has identified Vladimir Putin's superyacht more than 5,900km to the east, alongside Petropavlovsk-Kamchatsky, on Russia's Pacific coast. The KOSATKA was last identified at Severodvinsk on the 17th of August 2026. She was next detected by Theia on the 13th of September, having transited the length of Russia's Arctic coastline via the Northern Sea Route to reach Kamchatka. Petropavlovsk-Kamchatsky sits on Avacha Bay, home to Russia's Pacific Fleet, including the Rybachiy submarine base at Vilyuchinsk on the opposite shore. It is assessed that her arrival marks a further stage in the vessel's relocation away from European Russia, though the purpose of her presence at Kamchatka has not been confirmed. The 82-meter superyacht, formerly named GRACEFUL, was sanctioned by the United States in 2022, shortly after which she was renamed. She departed the Baltic Sea under naval escort in late June 2026, reportedly amid concerns over the reach of Ukrainian long-range drones, before being tracked by Theia to Severomorsk and subsequently Severodvinsk. Theia ingests more than 40 million km² of satellite imagery daily, fusing EO, SAR, and AIS data to automatically detect, identify, and track tens of thousands of vessels across oceans, regardless of AIS status. SynMax's Agentic AI, Atlas, provides automatic alerts on vessels of interest, delivering actionable intelligence on high-value targets regardless of how far, or how dark, they travel.

SynMax will be at the Potomac Officers Club 2026 Intel Summit this Thursday, September 24, at the Falls Church Marriott Fairview Park in Virginia. Strong lineup for anyone working intelligence and national security, with keynotes across the IC and panels on GEOINT, OSINT, and agentic AI. Those are the problems we work on every day at SynMax. If you'll be there, let's connect.

Following our previous report (link in comments) on the hijacking of the HONOUR 25 (IMO 1099735), the SWARD (IMO 9174244), and the M/T EUREKA (IMO 1022823), the resurgence of Somali piracy along the Puntland coast has continued to escalate, with three further vessels seized since our last update. On the 17th of July 2026, the ASANA (IMO 9035838), a 127-meter, Tanzanian-flagged oil and chemical tanker built in 1992, was hijacked approximately 65 nautical miles southwest of Al Mukalla, Yemen, shortly after departing the port. On the 17th of August 2026, the LUTUF (IMO 9109134), a Cameroon-flagged cargo vessel reportedly carrying equipment destined for a Turkish military training facility in Mogadishu, was boarded approximately four nautical miles off Mareeyo, in Puntland's Eyl district. Following a 10-day joint operation conducted by the Turkish Navy and the Somali National Armed Forces, during which four pirate skiffs were reportedly destroyed and 14 pirates killed, the LUTUF was freed on the 29th of August. Puntland authorities have disputed this account, alleging that an unconfirmed ransom secured her release. On the 20th of August 2026, the SIBU 1 (IMO 9204776), an Eritrean-flagged oil products tanker previously named SEAMULL and sanctioned by OFAC for her alleged role in Iran's shadow fleet, was hijacked approximately 136 nautical miles east of Al Mukalla, Yemen, and taken toward the Puntland coast, becoming the sixth vessel seized since the 21st of April. On the 11th of September, the SWARD and her crew, imaged on the 7th of September, were released from captivity after a ransom was reported to have been paid.  SynMax's maritime domain awareness platform, Theia, continues to maintain visual custody of the vessels still under pirate control. Between the 2nd and 7th of September 2026, Theia detected the SIBU 1, ASANA, and M/T EUREKA AIS dark, and the HONOUR 25 and SWARD AIS light, all distributed across the Puntland coastline. Four commercial vessels and dozens of seafarers remain under pirate control. The geographic spread of these hijackings is consistent with the reconstitution of a pirate action group network capable of sustained, long-range operations. Theia ingests more than 40 million km² of satellite imagery daily, fusing electro-optical and SAR imagery with AIS to automatically detect, identify, and track tens of thousands of vessels, regardless of their signal output. Tip-and-cue capabilities automatically task high-resolution imagery of vessels of interest, while SynMax's Agentic AI enables the precise interrogation of vast, preprocessed datasets to expose true unknown unknowns.

In the final part of our four-part spoofing series, we explore how AIS spoofing became a go-to tactic for the shadow fleet. AIS spoofing didn't arrive fully formed. It's a tactic that developed over roughly 25 years, evolving in response to technology and regulatory pressure. Through the 1990s and 2000s, AIS was a trust-based safety tool built to prevent collisions. The only evasion tactic needed was switching it off. As satellite tracking matured through the 2010s, a gap in coverage became suspicious in itself. Bad actors shifted from absence to deception. Identity theft and false location spoofing emerged, driven by sanctions on North Korea, Iran, Syria, and Venezuela. Spoofing became a digital alibi for vessels trading with sanctioned states. This came to the attention of the international community in 2018, when the UN found that the tanker YUK TUNG (IMO 9030591) had transmitted false AIS data, posing as another vessel during a ship-to-ship transfer with a North Korean tanker. Regulators began treating spoofing as deliberate evasion rather than a data error. Tactics kept advancing. Identity laundering and "zombie ships" emerged, manufacturing clean identities instead of borrowing them. Location spoofing moved from basic geometric patterns (images 1 & 2) to complex, plausible vessel paths. The line between commercial and state-level coordination blurred. Russia's 2022 invasion of Ukraine and the sanctions that followed drove a step change. What had been a limited tactic became the shadow fleet: hundreds of aging tankers, often uninsured, falsely flagged, or registered under minimal-oversight flag states. AIS spoofing moved from niche to industrial scale. The good news is that regulators are catching up. Recent sanctions guidance now names AIS manipulation alongside ship-to-ship transfers, false documentation, and flag-hopping as recognized evasion techniques. The question is no longer whether a vessel is transmitting, but whether the transmission is true. Detection advances, evasion adapts. The constant is structural: AIS is self-reported, so verification has to come from outside the signal. As spoofing grows more sophisticated, enforcement has to adopt the practices maritime security professionals already use: fusing and cross-referencing multiple sources rather than trusting a single signal. No longer a definitive record of identity or movement, AIS is one data source among many. This is the principle on which Theia is built. By fusing over 40 million km² of daily satellite imagery with global AIS, SAR, and additional intelligence sources, Theia establishes ground truth independent of any single signal's claim. Atlas, SynMax's Agentic AI, lets analysts interrogate that fused dataset directly, surfacing suspicious behavior regardless of AIS output or compliance status.