Event dd84bc80-93b1-443f-ac80-a49faf74f8e8

Approved event from Hybrid War Tracker

Status: Approved Confidence: Low Classification: Military & Paramilitary Operations > Unconventional / Paramilitary > Proxy forces, militias, mercenaries (e.g. Wagner-type groups) Country: United Kingdom Where: Land Node: Node 1: Borders Tag: Russian sabotage Tag: hybrid warfare Tag: RUSI report Tag: disposable agents Tag: NATO allies Tag: Poland Tag: Lithuania Tag: Latvia Tag: United Kingdom Tag: cyber recruitment Tag: Telegram Tag: encrypted communications Tag: arson Tag: railway sabotage Tag: drone warfare Tag: military intelligence Tag: Ukraine conflict Aggressor Defense Confidence: High
🕐
Event Time
3w ago
Created
3d ago
✏️
Updated
1d ago

Summary

Headline: Russian military intelligence has increased hybrid warfare sabotage campaigns across Europe, recruiting disposable agents for attacks including arson, bombings, and reconnaissance in UK, Poland, Lithuania, and Latvia.

Short Summary: A report by the RUSI think tank exposes a significant rise in Russian hybrid warfare sabotage operations across NATO countries since the invasion of Ukraine, with Russia recruiting 'disposable agents' many from Ukraine and other European countries to perform acts ranging from graffiti to murder. These agents are paid between £10 for minor vandalism to £7,000 for murder. Recent attacks include arson at Poland's largest shopping centre, explosions on a critical Poland-Ukraine rail link, sabotage of electrical infrastructure in the UK, booby-trapped parcels in Germany, and the downing of a DHL cargo plane in Lithuania. Recruitment occurs remotely via encrypted platforms such as Telegram and Viber, demonstrating a shift to a 'gig-economy era' of sabotage that is cost-effective and deniable. The campaign aims to disrupt support for Ukraine and test NATO's red lines, with at least 110 incidents linked to Russia since 2022. The UK Ministry of Defence emphasizes increasing defence spending and investment in drone and counter-drone systems to prepare for high-intensity conflicts expected in Europe.

Extended Summary: A report by the RUSI think tank exposes a significant rise in Russian hybrid warfare sabotage operations across NATO countries since the invasion of Ukraine, with Russia recruiting 'disposable agents' many from Ukraine and other European countries to perform acts ranging from graffiti to murder. These agents are paid between £10 for minor vandalism to £7,000 for murder. Recent attacks include arson at Poland's largest shopping centre, explosions on a critical Poland-Ukraine rail link, sabotage of electrical infrastructure in the UK, booby-trapped parcels in Germany, and the downing of a DHL cargo plane in Lithuania. Recruitment occurs remotely via encrypted platforms such as Telegram and Viber, demonstrating a shift to a 'gig-economy era' of sabotage that is cost-effective and deniable. The campaign aims to disrupt support for Ukraine and test NATO's red lines, with at least 110 incidents linked to Russia since 2022. The UK Ministry of Defence emphasizes increasing defence spending and investment in drone and counter-drone systems to prepare for high-intensity conflicts expected in Europe.

Description

Russian military intelligence has intensified a sabotage campaign across Europe using remotely recruited 'disposable agents' who conduct low- to high-level attacks including graffiti, reconnaissance, arson, bombings, and murder. Payments vary by task complexity, with major operations like murder fetching up to £7,000. Recent incidents include a major arson attempt at a Warsaw shopping centre, sabotage of a strategic Poland-Ukraine railway in November 2025, the downing of a DHL plane near Vilnius, and establishment of booby-trapped parcels in Germany. Recruitment leverages encrypted messaging apps, enabling deniable and distributed sabotage activities. The goal appears to be increasing the cost of Western support for Ukraine and probing NATO's limits. The UK government acknowledges a defence spending shortfall but aims to bolster drone capabilities and military readiness.

Event Classification

Aggressor Event Defense Preparation Event

Rationale

The article explicitly describes the increase in Russian military intelligence-led sabotage attacks across Europe, targeting NATO allies via proxy disposable agents (aggressor activity). It also details UK government responses to increase defence spending and enhance military readiness, especially in drone and counter-drone systems, supporting defense preparation classification.

Evidence

Quotes

"A bombshell report released today reveals how devastating 'hybrid warfare' operations attributed to Russian military intelligence have tripled across NATO allies since Putin's invasion of Ukraine."
"£10 for graffiti, £445 for reconnaissance and £7,000 for murder – these are the going rates for Europeans willing to betray their country for Vladimir Putin."
"Russia is increasingly recruiting so-called 'disposable agents' – many from Ukraine – to do their dirty work and sow chaos with attacks on civilian targets like shopping centres and railways."
"In November, a crucial rail link between Poland and Ukraine was blown up, in what Polish officials called an 'unprecedented act of sabotage.'"
"Other attacks saw a Ukrainian-owned warehouse in east London set alight, a letter bomb planted on a plane to Britain and booby-trapped parcels deployed across Germany’s Leipzig."
"A DHL jet plummeted from Lithuania’s skies and erupted into a fireball in a disaster linked to Putin’s spies."
"The entire process, including the coordination, has shifted online, taking advantage of encrypted platforms such as Telegram and Viber."
"By embracing a distributed network of disposable agents, Russia has created a cost-effective, deniable and difficult-to-map sabotage ecosystem."
"This government is delivering the largest sustained increase in defence spending since the end of the Cold War – with a £5bn boost last year and hitting 2.6% of GDP by 2027, a level not seen since 2010."
Subscribe via Weekly Briefs RSS or Approved Events RSS .