Russia’s Grey Zone Hub: North Korea, China & the Iran Weapons Pipeline

Key Judgments

• ASSESSED: Russia functions as the logistical, technological, and intelligence hub of a four-nation coordination architecture – receiving manpower and munitions from North Korea and enabling components from China to sustain the Ukraine war, while in turn supplying material and intelligence support to Iran’s war with the United States and Israel. This is best read as a single interconnected system, not four separate bilateral relationships.
• CONFIRMED: North Korea is Russia’s single largest external contributor of manpower and munitions in the Ukraine war, at a scale credibly assessed by Ukrainian defense intelligence to account for roughly half of Russia’s frontline ammunition needs.
• ASSESSED: China’s contribution to Russia’s war effort is deliberately calibrated below the finished-weapons threshold – dual-use microelectronics and components rather than complete platforms – preserving Beijing’s public denial and “three principles” posture as a functional element of the arrangement, not merely rhetoric.
• CONFIRMED: Russia has supplied Iran with material (TNT, drone components, ammunition) via Caspian Sea shipping routes since the current US-Iran war began, and – per Joint Chiefs-level US statements – has shared intelligence including satellite imagery and targeting-relevant data.
• ASSESSED: The August 2026 US intelligence warning delivered to Moscow via CIA Director Ratcliffe indicates Washington now treats Russia’s roles in Ukraine and Iran as a single linked deterrence problem rather than two separate files.

Framing: Russia as Coordination Hub, Not Solo Actor

Where Part II profiled China as a dual-role actor spanning two framework terms through its own direct action, this chapter profiles Russia through a different lens: as the connective node of a proxy architecture that spans four nations.

Deniability/Proxy Warfare is the dominant framework term here, expressed in two directions simultaneously – inbound support from North Korea and China that sustains Russia’s own war, and outbound support to Iran that extends Russia’s reach into a conflict it is not formally party to.

Deniability/Proxy Warfare: North Korea’s Contribution

This is the chapter’s strongest-sourced material, and the clearest audience-facing impact point in the dossier.

• Manpower: an estimated 11,000–15,000 North Korean troops have deployed to Russia’s Kursk Oblast, per Ukrainian and South Korean government estimates. As of August 2026, a North Korean missile unit of approximately 90 personnel was reportedly deploying to Voronezh, equipped with up to 120 ballistic missiles and six launchers.
• Munitions: North Korea has supplied an estimated 5–6 million rounds of artillery and mortar ammunition – a volume one US assessment characterized as exceeding recent decades of combined NATO ammunition production. Ukrainian military intelligence (under Kyrylo Budanov) assessed North Korean supply covers roughly half of Russia’s frontline ammunition requirements.
• Hardware: 120 M1989 Koksan self-propelled artillery systems (170mm) and 120 M-1991 multiple-launch rocket systems (240mm) were delivered over a recent three-month window; at least 150 KN-23 short-range ballistic missiles have reportedly been committed, with 40 already delivered and at least two confirmed fired at Ukrainian targets.

These figures are presented as a range where sources diverge rather than a single point estimate, and attributed specifically to Ukrainian defense intelligence and independent Western reporting.

Deniability/Proxy Warfare: China’s Calibrated Contribution

China’s role in the same inbound flow is smaller in reported volume but analytically significant for a different reason: it is the clearest illustration of the Deniability/Proxy Warfare framework term in this entire series.

ASSESSED: China has supplied microelectronics and dual-use components used in Russian ballistic, hypersonic, and cruise missile production – the enabling layer of the supply chain rather than finished platforms.

• Beijing’s public posture – denial of “groundless accusations” and its declared “three principles” (no battlefield expansion, no escalation, no provocation) – functions as the diplomatic cover that makes a lower-visibility contribution possible. This is worth reading not as a caveat on the claim but as part of the claim itself: the deniability is the mechanism.
• Ukrainian allegations of Chinese-supplied gunpowder and artillery, including sanctions against specific Chinese companies, remain at ASSESSED/SPECULATIVE tier – China disputes these directly, and this dossier does not present them as CONFIRMED.

Kinetic Gate: Russia’s Support to Iran

The outbound half of the architecture – and the clearest sign that Russia’s war-sustainment relationship with North Korea and China has a direct payoff in a second theater.

• CONFIRMED: Russia has supplied TNT, drone components, and ammunition to Iran via Caspian Sea shipping routes since the 2026 war began; open-source shipping analysis has identified over two dozen vessel transits associated with this flow.
• ASSESSED (Joint Chiefs-level, single-chain sourcing): intelligence and satellite-imagery sharing, including reported targeting-relevant data on US and allied installations and a list of Israeli energy-infrastructure targets. This traces back through Ukrainian intelligence claims relayed via US officials – tiered ASSESSED rather than CONFIRMED given that sourcing chain.
• CONFIRMED (pre-war, contractual – establishing this as a standing relationship, not an improvised wartime response): a Su-35 fighter contract for 48 aircraft, Yak-130 combat trainers delivered since 2024, up to six Mi-28 attack helicopters delivered by January 2026, and a €500 million Verba MANPADS contract signed in February 2026.
• Reciprocity: Iran’s earlier transfer of Shahed-series drones and production technology to Russia, ongoing since 2022, is the mirror-image case – useful context showing this proxy relationship runs in both directions rather than being a one-way wartime favor.

CommandEleven Dossiers

FindFace: Assessing Iran’s Secret Russian Surveillance Grid – CommandEleven’s existing technical assessment of Russian-supplied surveillance/facial-recognition infrastructure inside Iran, a direct, independently-sourced example of the technology-transfer dimension of this relationship that sits alongside the material and intelligence flows above.

Kinetic Gate: The Baltic Warning

• CONFIRMED: US intelligence assessed that Russia may be preparing to test NATO’s Article 5 resolve through a limited attack or hybrid incursion against a member state, with Baltic states and Poland specifically named in reporting.
• CONFIRMED: CIA Director Ratcliffe made an unannounced trip to Moscow on August 25, 2026 – multiple outlets (WSJ, CNN, RFE/RL) converge on the same core account – carrying a direct warning against such an action, alongside a demand that Russia curtail military and economic support to Iran, timed alongside the Treasury’s “Operation Economic Outcast” sanctions announcement. Russia’s SVR confirmed a “working-level meeting” occurred; Peskov confirmed Putin was briefed but did not attend.
• Calibrating counterweight, included deliberately: Baltic officials themselves downplayed the visit’s significance – Estonia’s foreign minister stated it “should not be seen as pivotal” and that the country’s own threat assessment had not changed. This is included so the chapter does not read as more alarmist than the underlying sourcing supports.
• DATA DEFICIT – explicitly excluded from Key Judgments: a claim that Putin ordered a shutdown or drawdown of the US embassy in Moscow tied to this visit is circulating but uncorroborated; no independent reporting supports it. The C-17 Globemaster associated with this claim has a fully mundane, confirmed explanation – it was Ratcliffe’s transport aircraft, routed via Riga – that does not require the embassy claim to account for it. This item is named here for reader awareness only, consistent with how Part II treats its own single-source Taiwan item.

Synthesis: Reading the Four-Nation Architecture as a Single System

The core takeaway for readers: this is not four bilateral relationships running in parallel. It is one coordination system with Russia positioned at the center – North Korean and Chinese inbound support sustaining the war that gives Russia both the material capacity and the strategic motive to extend outbound support to Iran, with the Ratcliffe visit itself serving as evidence that Washington has begun treating Ukraine and Iran as a single linked deterrence problem rather than two unconnected files.

This framing carries forward directly into Part IV (Iran), where the same Russia-Iran relationship is examined from the receiving end and set alongside Iran’s own proxy network, and into Part VI’s synthesis, where all four actors are compared side by side against the full four-term framework.

Assessment: 12–24 Month Trajectory

North Korean contribution levels: watch for a plateau, not a withdrawal.

ASSESSED: North Korea’s manpower and munitions flow to Russia is more likely to stabilize at current volume than to either escalate sharply or wind down over the next 12–24 months. Pyongyang’s own domestic ammunition production capacity is finite, and the reported shift toward higher-value transfers (ballistic missile units, KN-23s) alongside continued bulk artillery supply suggests Pyongyang is diversifying what it contributes rather than scaling back the relationship. The more consequential variable to monitor is not whether North Korea keeps contributing, but what it continues to receive in return – technology transfer, hard currency, and diplomatic cover are all plausible payoffs whose scale isn’t yet independently confirmed.

Russia’s outbound support to Iran tracks the war’s trajectory, not a fixed commitment.

ASSESSED: if the US-Iran conflict moves toward a durable ceasefire in this window, expect the visible portion of this relationship – shipping volumes, satellite-imagery sharing – to become harder to detect, not necessarily smaller. The pre-war contractual relationship (Su-35s, Yak-130s, the Verba deal) indicates a standing partnership that will persist independent of any single ceasefire. If the conflict re-escalates instead, expect continued or increased Caspian shipping activity, and continued Ukrainian efforts to interdict it, as already demonstrated by the July 2026 strikes on Russian-flagged cargo vessels.

The Baltic warning is more likely a deterrent signal than the opening move of a pattern.

ASSESSED: the balance of evidence – Baltic officials’ own downplaying, the absence of any follow-on incident in the weeks since the Ratcliffe visit, and Russia’s evident manpower and materiel constraints from sustaining both the Ukraine and Iran-support commitments – favors reading this as a one-time high-level warning rather than the first of a recurring pattern. That said, this is the single highest-consequence item in the chapter if the assessment is wrong, and should be revisited in any update to this dossier regardless of which way it trends.

The embassy-shutdown claim should be resolved, not carried forward indefinitely.

This dossier’s position is that the claim remains uncorroborated as of drafting. Over the next update cycle, this item should either be dropped (if it continues to generate no independent corroboration) or elevated in tier (if credible independent reporting emerges) – it should not simply persist in the DATA DEFICIT category across multiple future installments without an active attempt at resolution.

Cross-cutting judgment

Of the four actors profiled in this series, Russia is the one whose grey-zone behavior is most directly a function of external inputs – what it receives from North Korea and China materially shapes what it’s able to project outward to Iran. That dependency is itself a lever: constraining any one leg of the inbound relationship (sanctions enforcement against MG-FLOT-style shipping entities, for instance) plausibly constrains Russia’s capacity across both theaters simultaneously, a policy-relevant point worth carrying into the synthesis chapter’s strategic-implications section.

GREY ZONE WARFARE SERIES

PART I – Grey Zone Warfare Explained: The Framework Behind China, Russia, Iran & North Korea

PART II – China’s Grey Zone Playbook: Salt Typhoon, EO 14420 & Iran’s BeiDou Pivot

PART III – Russia’s Grey Zone Hub: North Korea, China & the Iran Weapons Pipeline

PART IV – Iran’s Proxy Empire: The Axis of Resistance and the Grey Zone Playbook

PART V – North Korea’s New Threat: ICBMs, Japan, and the Homeland Reclassification

PART VI – Grey Zone Warfare Synthesis: How China, Russia, Iran & North Korea Connect