wild guess: spies compromise terminals before it is given to troops, take tactical advantage of live GPS and maybe MITM them later?
Traffic interception.
So they steal the user terminals, give them back to the Ukrainian soldiers, then intercept their (probably TLS encrypted) traffic, and then send that information back to themselves?