Editor's note: This is a developing story.

A Russian drone attack on a shopping center in Kryvyi Rih on 21 August killed at least 15 people and injured 130, including 23 children, local authorities said.

The attack struck the shopping mall during the day, setting shops inside the building on fire, regional military administration head Oleksandr Hanzha said.

The attack came in two waves, with the second strike hitting emergency responders about 30 minutes after the first strike caused the fire, Ukrainian President Volodymyr Zelenskyy said.

Twenty-nine people remain in serious condition, including five children, according to Head of the Kryvyi Rih Defense Council Oleksandr Vilkul.

One of the victims died in hospital from severe injuries sustained in the attack, bringing the death toll to six, according to Hanzha.

Second strike hit emergency responders

The second wave came as emergency crews were responding to the fire caused by the first strike.

Zelenskyy called the attack “simply an act of terrorism” and said the international community should respond with real pressure on Russia.

“For peace to be possible, Russia needs to face real accountability,” Zelenskyy said.

Kryvyi Rih, in central-southern Ukraine, has faced frequent Russian missile and drone attacks throughout the full-scale war, with repeated strikes causing heavy civilian casualties.

Russian channels acknowledge strike on civilian target

Russian military Telegram channels described the shopping center as a target shortly after the attack, according to Kryvyi Rih Times.

One Russian channel claimed that a “Geran-4” jet-powered drone had been used to strike the shopping and entertainment complex and said the “target was hit” before noting that a fire had broken out inside the building.

The channel also published the precise coordinates of the shopping center.

The posts did not provide evidence that the shopping center was a legitimate military target.

Russian forces have repeatedly used drones and missiles to strike Ukrainian cities and civilian infrastructure throughout the full-scale invasion.

Russian attacks across Dnipropetrovsk Oblast

Russian forces attacked four districts of Dnipropetrovsk Oblast nearly 60 times on 21 August using drones, artillery, and an aerial bomb, Hanzha said.

In addition to the attack on Kryvyi Rih, Russian strikes hit communities in Nikopol, Synelnykove, and Kamianske districts, damaging apartment buildings, private homes, and cars.

Three people were injured in Nikopol district, while two others were injured in Synelnykove district. Several of the injured were hospitalized, Hanzha said.

The attacks also damaged private homes in Synelnykove district and caused a fire in the Krynychanska community of Kamianske district.

Ukraine's Security Service (SBU) urged Ukrainians to remain particularly vigilant ahead of Independence Day on 24 August, warning of potential Russian attacks and other security threats around the holiday.

Security threats are often heightened around major national holidays in Ukraine during the full-scale war with Russia, when large public gatherings can create opportunities for attacks and Russia has an added incentive to use symbolic dates to spread fear and disruption.

The SBU said Russia could exploit Independence Day gatherings for attacks, provocations, sabotage, cyberattacks, or other crimes.

Russia may recruit Ukrainians for sabotage

The SBU specifically warned about attempts by Russian intelligence services to recruit Ukrainians to carry out attacks inside the country.

According to the agency, Ukrainians could be offered money to set fires, damage property, plant suspicious objects, collect information about military facilities, or carry out other illegal activities.

The SBU urged people not to accept such offers and to immediately report attempts at recruitment.

It also warned that recruiters may disguise requests as ordinary tasks. People could be asked to photograph a particular location, deliver a package, or leave an object somewhere without being told the real purpose of the task.

The SBU said people should be especially cautious about requests from unknown individuals, including those claiming to represent law enforcement.

Russia has repeatedly sought to recruit Ukrainians for sabotage and other activities inside Ukraine during the full-scale war. Ukrainian authorities have previously reported cases in which people were offered money to carry out arson attacks, damage infrastructure, gather intelligence, or perform other tasks on behalf of Russian handlers.

Explore further

Alleged Russian agent arrested in Dnipro, accused of activating 1,000+ Starlink communications terminals to support Russian forces

Warning over information that could help Russia

The agency also urged Ukrainians to avoid sharing information that could help Russia identify military targets or assess the results of its attacks.

That includes photos and videos showing the locations of Ukrainian troops, critical infrastructure, checkpoints, and air defense systems.

The SBU also told people not to publish information about the consequences of Russian strikes, Ukrainian air defense operations, or the movement of Ukrainian military personnel.

Such information can reveal the location and activity of Ukrainian forces or help Russia assess the effectiveness of its strikes.

Independence Day under wartime threats

Ukraine will mark its 35th Independence Day on 24 August, more than four years after Russia launched its full-scale invasion.

The holiday comes as Russia continues to use missiles and drones to attack Ukrainian cities and infrastructure, while Ukrainian authorities remain concerned about Russian intelligence activity and sabotage inside the country.

The SBU urged Ukrainians to remain particularly vigilant before and during Independence Day and to report suspected recruitment, preparations for sabotage or terrorism, and other activity that could threaten national security.

Australian police have charged a 27-year-old Russian-Australian man with foreign interference after alleging he joined Ukraine's armed forces to obtain military information for Russian intelligence, the ABC reported.

Russia has repeatedly sought to obtain information about Ukraine's military through espionage and intelligence operations as it continues its full-scale invasion. The alleged operation also shows how Moscow can use individuals in third countries to gain access to Ukrainian military information and attempt to pass it to Russian intelligence.

The Australian Federal Police (AFP) arrested Vladimir Teslov on 20 August in Sumner, a suburb of Brisbane. He appeared in Brisbane Magistrates Court on 21 August, where his case was adjourned until 2 October, according to the ABC.

Alleged operation inside Ukraine

According to the AFP, Teslov traveled to Russia in October 2024 and underwent military-style training before returning to Australia in December.

Teslov allegedly maintained contact after his return with individuals he believed were connected to Russian intelligence services, the AFP said in a press release.

Police allege he traveled to Ukraine in May 2025 and joined the Ukrainian Armed Forces, where he gained access to information about Ukrainian military personnel, units, and locations.

The AFP alleges Teslov subsequently provided, or attempted to provide, information obtained in Ukraine to people he believed were acting on behalf of Russian intelligence.

The agency said he sought to collect and communicate information about Ukrainian military personnel, locations, and operations for the benefit of Russia.

AFP Commissioner Krissy Barrett said the alleged activity could have endangered Ukrainian troops.

“It is alleged that this conduct created a risk to the safety and security of Ukrainian military personnel,” Barrett said, according to ABC.

The allegations have not been tested in court.

Australia has been a major supporter of Ukraine since Russia launched its full-scale invasion in February 2022, providing about A$1.8 billion in military, economic, and humanitarian assistance.

Explore further

“What happens in Ukraine matters in Indo-Pacific”: Australia pledged Ukraine another $70 million

Investigation into alleged Russian intelligence links

The AFP said its Counter Foreign Interference Task Force began Operation Woodcreeper in June 2026, following an extensive investigation by Australia's domestic intelligence agency, ASIO.

Australian authorities carried out searches at five properties in Queensland on 20 and 21 August, according to the AFP press release. Police seized electronic devices and other items relevant to the investigation, which will undergo forensic examination.

The AFP said further arrests are possible.

Barrett said there was no indication that Teslov posed a threat to Australia itself, although investigators allege parts of the activity took place both in Australia and overseas.

The foreign interference charge carries a maximum penalty of 20 years in prison.

The Russian Embassy in Canberra told ABC it learned of the case through media reports and had not received an official notification from Australian authorities or Teslov. It said it was using available channels to establish the circumstances of the case.

Russian espionage cases in Australia

Australian authorities have previously warned of Russian intelligence activity in the country.

ABC noted a separate case involving Russian-born Australian citizens Kira and Igor Korolev, who were arrested in 2024 and accused of attempting to gather and send sensitive information to Russia. Their charges were upgraded to conspiracy to commit espionage in June.

In 2022, Australian Security Intelligence Organisation (ASIO) Director-General Mike Burgess said the agency had disrupted a “hive of spies” from an unnamed country seeking to recruit Australians and obtain sensitive information. Multiple media reports later identified Russia as the country involved, although ASIO has not publicly confirmed this.

Last month, the Australian Signals Directorate and nearly two dozen international partner agencies warned that Russian-linked hackers were targeting Australian defense, communications, energy, and financial sectors.