A Bulgarian man and woman detained after a September 3 arson attack in Munich were identified as part of a group linked to Russia’s GRU military intelligence agency operating from Slovakia. The arson involved throwing two incendiary devices from a passing car onto a construction site near the headquarters of Rohde & Schwarz and Helsing, drone suppliers to the Ukrainian Armed Forces. The fire was quickly put out and damage was minor. The same group had planned a similar arson attack on the Skyeton plant near Prešov, Slovakia, a producer of reconnaissance drones for Ukraine, but this was disrupted with several arrests including a Latvian and a Ukrainian. Investigators also link this group to an attempted drone attack on Leipzig/Halle airport on August 4, attributed to the GRU’s Special Activities Service. These operations aim to disrupt military supplies to Ukraine and pressure Europe's support for Kyiv. After the expulsion of Russian intelligence officers from Europe, the GRU started recruiting operatives via Telegram, paying in cryptocurrencies. French President Macron warned France could face similar sabotage, and U.S. intelligence warned of possible Russian drone attacks against Spain, France, or Italy.

A Bulgarian man and woman detained after a September 3 arson attack in Munich were identified as part of a group linked to Russia’s GRU military intelligence agency operating from Slovakia. The arson involved throwing two incendiary devices from a passing car onto a construction site near the headquarters of Rohde & Schwarz and Helsing, drone suppliers to the Ukrainian Armed Forces. The fire was quickly put out and damage was minor. The same group had planned a similar arson attack on the Skyeton plant near Prešov, Slovakia, a producer of reconnaissance drones for Ukraine, but this was disrupted with several arrests including a Latvian and a Ukrainian. Investigators also link this group to an attempted drone attack on Leipzig/Halle airport on August 4, attributed to the GRU’s Special Activities Service. These operations aim to disrupt military supplies to Ukraine and pressure Europe's support for Kyiv. After the expulsion of Russian intelligence officers from Europe, the GRU started recruiting operatives via Telegram, paying in cryptocurrencies. French President Macron warned France could face similar sabotage, and U.S. intelligence warned of possible Russian drone attacks against Spain, France, or Italy.