Event a70678d5-b83f-4bec-a8be-b4fc3fed4b8c

Approved event from Hybrid War Tracker

Status: Approved Confidence: Low Classification: Military & Paramilitary Operations > Unconventional / Paramilitary > Use of 'little green men' (unmarked soldiers) Country: European Union Where: Land Tag: Russia Tag: hybrid warfare Tag: cyberattacks Tag: sabotage Tag: Espionage Tag: Baltic States Tag: European Union Tag: NATO Tag: migration crisis Tag: Associated Press Tag: European Broadcasting Union Tag: Telegram Tag: Poland Tag: Lithuania Aggressor Confidence: High
🕐
Event Time
10mo ago
Created
1d ago
✏️
Updated
13h ago

Summary

Headline: Over 50 European hybrid-attacks attributed to Russia, journalists find

Short Summary: Over 50 hybrid attacks in Europe since early 2022 have been officially attributed to Russia, targeting critical infrastructure and political figures across multiple countries.

Extended Summary: The Associated Press has documented 59 hybrid attacks linked to Russia across Europe since the start of the Ukraine war over three years ago. These include cyberattacks, arson, acts of sabotage, and attempted explosives plots. NATO officials report the campaign aims to cause political unrest and reduce Western support for Ukraine. Countries affected include Estonia, Poland, Latvia, Finland, Lithuania, and Poland where major fires were publicly linked to Russia. The European Broadcasting Union also uncovered a hacking group linked to Moscow conducting cyberattacks on EU and NATO infrastructure targets. Russian intelligence is reportedly recruiting disposable agents for such operations. The Czech foreign minister cited 500 Moscow-linked hostile incidents with intensifying attacks. The Kremlin denies all accusations. This widespread campaign represents a concerted Russian hybrid warfare effort permeating multiple European countries' security and stability.

Description

Journalists from the Associated Press and European Broadcasting Union have documented over 50 hybrid attacks in Europe attributed to Russia and its proxies since the start of the war in Ukraine in 2022. These attacks include cyberattacks on political and critical infrastructure targets, acts of arson, sabotage operations including major fires in Lithuanian and Polish capitals, and plots to plant explosives on cargo planes. NATO officials describe the campaign as aimed at causing political disquiet and weakening Western support for Ukraine. The operations exploit 'disposable' agents recruited through messaging platforms for low-level tasks. The Czech Republic reports about 500 suspicious Moscow-linked hostile incidents, with attacks increasing in intensity. The Kremlin denies involvement.

Event Classification

Aggressor Event

Rationale

The event clearly documents hostile Russian hybrid warfare operations targeting multiple European countries, involving cyberattacks, sabotage, espionage, and political destabilization, as reported by credible sources and official intelligence. No defensive/preparatory alliance response is described in the article.

Evidence

Quotes

'AP has documented 59 incidents that have been officially blamed on an extension of the Kremlin’s war efforts commonly dubbed 'hybrid war' tactics.'
'The operations, described by the head of Britain's Secret Intelligence Service as a 'staggeringly reckless campaign,' have involved the hacking of politicians and critical infrastructure, acts of arson, and a plot to plant explosives on cargo planes,' AP said.
'A NATO official cited by AP said the campaign’s aims are twofold—to cause 'political disquiet' and to 'undercut support for Ukraine' with attacks focusing on countries that give most support to Kyiv.'
'A series of apparent sabotage operations in the Baltic Sea has been attributed to a 'shadow fleet' of ships used by Russia to circumvent sanctions. On land, Estonia, Poland, Latvia and Finland have all accused Russia and its ally Belarus of orchestrating migration emergencies at their borders. Major fires in the Lithuanian and Polish capitals have also been publicly linked to Russia.'
'Researchers for the European Broadcasting Union (EBU), an alliance of public media organizations, infiltrated a hacking group linked to Moscow.'
'The EBU reported that the group was behind cyberattacks on infrastructure targets in EU and NATO countries as part of a wider network of 'hacktivists' that is becoming increasingly active.'
'The EBU wrote that Russian intelligence agencies have taken to recruiting 'disposable' agents through acts like Telegram to perform ‘low-level’ operations.'
'This strategy makes attributing responsibility for attacks problematic, however the Czech Republic's foreign minister, Jan Lipavsky, was cited by the EBU as giving a concrete number of Moscow-linked hostile acts. He said of 500 recorded suspicious incidents, the blame had been put on Moscow for 100. He added that the attacks are continuing and 'increasing in intensity.'
'A Kremlin spokesman contacted by AP rejected all allegations, saying the Russian government had never been shown any proof of its involvement.'
Subscribe via Weekly Briefs RSS or Approved Events RSS .