Signal
Submitted
Mar 23, 2026, 15:50 UTC
German agencies report a rise in Russian hybrid attacks including sabotage linked to Lithuania, with lethal incidents and political influence efforts intensifying in 2025.
A confidential joint assessment by German security agencies from July 2024 to June 2025 exposes significant Russian hybrid warfare targeting Germany, combining sabotage, espionage, disinformation, and political manipulation. In July 2024, incendiary devices sent from Lithuania aboard DHL cargo flights to Germany and the UK exploded at Leipzig after flight delays averted a major catastrophe. The report identifies single-use agents recruited via platforms like Telegram and highlights Russia's unhesitant use of lethal means to destabilize. Other incidents include a May 2025 Rostock port fire causing multi-million euro damage, sabotage targeting German defense industry leaders, cyber-attacks disrupting services, and exploitation of migrant flows from Belarus. Political influence tools include backing for the AfD party to heighten societal tensions. Germany is responding with deployment of Israeli-made Arrow-3 ballistic missile defense systems and founding specialized drone defense units to prepare for layered threats on infrastructure and security. Experts emphasize Germany remains under persistent hybrid threat pressure from Russia, underscoring a strategic imperative to bolster deterrence and resilience.
Confidence: High
The article provides clear evidence of Russian hybrid operations against Germany including sabotage, espionage, political influence, and cyberattacks, as well as German defensive measures including missile defense deployments and new counter-drone units, making both aggressor and defense preparation signals evident with high confidence.
Source URL
https://lrt.lt/en/news-in-english/19/2766329/germany-s-in-the-crosshairs-of-russian-operations-and-moscow-shows-no-hesitation-to-kill
Published as a Defense Preparations signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "084dbaa8-954a-4ca7-bddb-129f381dc35c",
"url": "https://lrt.lt/en/news-in-english/19/2766329/germany-s-in-the-crosshairs-of-russian-operations-and-moscow-shows-no-hesitation-to-kill",
"source": "extension",
"status": "approved",
"category": "Military & Paramilitary Operations",
"subcategory": "Unconventional / Paramilitary",
"incident_type": "Use of 'little green men' (unmarked soldiers)",
"country": "Germany",
"source_reliability": "B",
"info_credibility": "3",
"tags": [
"Russia",
"Germany",
"Hybrid Warfare",
"Sabotage",
"Espionage",
"Political Influence",
"Cyber Attack",
"Drones",
"Missile Defense",
"Lithuania",
"AfD",
"Voice of Europe"
],
"nodes": [
"Node 1: Borders",
"Node 2: 5th Column",
"Node 3: Political Disruptions"
],
"countries": [],
"where_text": "Land",
"headline": "Germany targeted by Russian hybrid operations including sabotage with lethal intent, linked to Lithuania",
"description": "A joint assessment by Germany's Federal Office for the Protection of the Constitution (BfV) and the Federal Criminal Police Office (BKA) covering July 2024 to June 2025 reveals a surge in Russian hybrid operations against Germany, including disinformation, espionage, sabotage, subversion, political influence and cyber-attacks. The report details 143 suspected sabotage incidents in the first half of 2025, highlighting Russia as the primary actor in efforts to destabilize Germany. A notable case involves incendiary devices sent from Lithuania via DHL aircraft in July 2024, narrowly avoiding disaster after delays prevented their transport on intended flights to the UK and Germany, igniting instead at a DHL warehouse in Leipzig. The report also cites sabotage attempts on German politicians, attacks on critical infrastructure such as the Rostock port fire in May 2025, and cyber-attacks including DDoS. Furthermore, the right-wing AfD party's connections to pro-Russian funding and exploitation of social tensions are noted. In response, Germany has unveiled advanced missile defense systems and is establishing specialized drone defense units to counter growing hybrid threats. Experts warn Russia shows no hesitation to employ lethal force as part of these operations aiming to erode public security and political stability.",
"summary_short": "German agencies report a rise in Russian hybrid attacks including sabotage linked to Lithuania, with lethal incidents and political influence efforts intensifying in 2025.",
"summary_extended": "A confidential joint assessment by German security agencies from July 2024 to June 2025 exposes significant Russian hybrid warfare targeting Germany, combining sabotage, espionage, disinformation, and political manipulation. In July 2024, incendiary devices sent from Lithuania aboard DHL cargo flights to Germany and the UK exploded at Leipzig after flight delays averted a major catastrophe. The report identifies single-use agents recruited via platforms like Telegram and highlights Russia's unhesitant use of lethal means to destabilize. Other incidents include a May 2025 Rostock port fire causing multi-million euro damage, sabotage targeting German defense industry leaders, cyber-attacks disrupting services, and exploitation of migrant flows from Belarus. Political influence tools include backing for the AfD party to heighten societal tensions. Germany is responding with deployment of Israeli-made Arrow-3 ballistic missile defense systems and founding specialized drone defense units to prepare for layered threats on infrastructure and security. Experts emphasize Germany remains under persistent hybrid threat pressure from Russia, underscoring a strategic imperative to bolster deterrence and resilience.",
"actor_primary": "Russian intelligence services",
"target_primary": null,
"location_text": "Leipzig, Rostock, Bremen, Schönewalde",
"location_region": null,
"location_coordinates_lat": null,
"location_coordinates_lon": null,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "DEFENSE_PREP_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article provides clear evidence of Russian hybrid operations against Germany including sabotage, espionage, political influence, and cyberattacks, as well as German defensive measures including missile defense deployments and new counter-drone units, making both aggressor and defense preparation signals evident with high confidence.",
"event_time_utc": "2025-07-01T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "pm24h",
"created_at": "2026-03-23T15:50:01.429Z",
"updated_at": "2026-11-04T08:35:32.139Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "within_24h",
"severity_band": "significant",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
B
Info credibility
3
Event time
Jul 1, 2025, 00:00 UTC
Event time confidence
pm24h
Location
Leipzig, Rostock, Bremen, Schönewalde
Primary actor
Russian intelligence services
Country
Germany
Tags
Russia, Germany, Hybrid Warfare, Sabotage, Espionage, Political Influence, Cyber Attack, Drones, Missile Defense, Lithuania, AfD, Voice of Europe
Nodes
Node 1: Borders, Node 2: 5th Column, Node 3: Political Disruptions
Signal
Submitted
Mar 23, 2026, 15:50 UTC
German agencies report a rise in Russian hybrid attacks including sabotage linked to Lithuania, with lethal incidents and political influence efforts intensifying in 2025.
A confidential joint assessment by German security agencies from July 2024 to June 2025 exposes significant Russian hybrid warfare targeting Germany, combining sabotage, espionage, disinformation, and political manipulation. In July 2024, incendiary devices sent from Lithuania aboard DHL cargo flights to Germany and the UK exploded at Leipzig after flight delays averted a major catastrophe. The report identifies single-use agents recruited via platforms like Telegram and highlights Russia's unhesitant use of lethal means to destabilize. Other incidents include a May 2025 Rostock port fire causing multi-million euro damage, sabotage targeting German defense industry leaders, cyber-attacks disrupting services, and exploitation of migrant flows from Belarus. Political influence tools include backing for the AfD party to heighten societal tensions. Germany is responding with deployment of Israeli-made Arrow-3 ballistic missile defense systems and founding specialized drone defense units to prepare for layered threats on infrastructure and security. Experts emphasize Germany remains under persistent hybrid threat pressure from Russia, underscoring a strategic imperative to bolster deterrence and resilience.
Confidence: High
The article provides clear evidence of Russian hybrid operations against Germany including sabotage, espionage, political influence, and cyberattacks, as well as German defensive measures including missile defense deployments and new counter-drone units, making both aggressor and defense preparation signals evident with high confidence.
Source URL
https://lrt.lt/en/news-in-english/19/2766329/germany-s-in-the-crosshairs-of-russian-operations-and-moscow-shows-no-hesitation-to-kill
Published as a Defense Preparations signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "084dbaa8-954a-4ca7-bddb-129f381dc35c",
"url": "https://lrt.lt/en/news-in-english/19/2766329/germany-s-in-the-crosshairs-of-russian-operations-and-moscow-shows-no-hesitation-to-kill",
"source": "extension",
"status": "approved",
"category": "Military & Paramilitary Operations",
"subcategory": "Unconventional / Paramilitary",
"incident_type": "Use of 'little green men' (unmarked soldiers)",
"country": "Germany",
"source_reliability": "B",
"info_credibility": "3",
"tags": [
"Russia",
"Germany",
"Hybrid Warfare",
"Sabotage",
"Espionage",
"Political Influence",
"Cyber Attack",
"Drones",
"Missile Defense",
"Lithuania",
"AfD",
"Voice of Europe"
],
"nodes": [
"Node 1: Borders",
"Node 2: 5th Column",
"Node 3: Political Disruptions"
],
"countries": [],
"where_text": "Land",
"headline": "Germany targeted by Russian hybrid operations including sabotage with lethal intent, linked to Lithuania",
"description": "A joint assessment by Germany's Federal Office for the Protection of the Constitution (BfV) and the Federal Criminal Police Office (BKA) covering July 2024 to June 2025 reveals a surge in Russian hybrid operations against Germany, including disinformation, espionage, sabotage, subversion, political influence and cyber-attacks. The report details 143 suspected sabotage incidents in the first half of 2025, highlighting Russia as the primary actor in efforts to destabilize Germany. A notable case involves incendiary devices sent from Lithuania via DHL aircraft in July 2024, narrowly avoiding disaster after delays prevented their transport on intended flights to the UK and Germany, igniting instead at a DHL warehouse in Leipzig. The report also cites sabotage attempts on German politicians, attacks on critical infrastructure such as the Rostock port fire in May 2025, and cyber-attacks including DDoS. Furthermore, the right-wing AfD party's connections to pro-Russian funding and exploitation of social tensions are noted. In response, Germany has unveiled advanced missile defense systems and is establishing specialized drone defense units to counter growing hybrid threats. Experts warn Russia shows no hesitation to employ lethal force as part of these operations aiming to erode public security and political stability.",
"summary_short": "German agencies report a rise in Russian hybrid attacks including sabotage linked to Lithuania, with lethal incidents and political influence efforts intensifying in 2025.",
"summary_extended": "A confidential joint assessment by German security agencies from July 2024 to June 2025 exposes significant Russian hybrid warfare targeting Germany, combining sabotage, espionage, disinformation, and political manipulation. In July 2024, incendiary devices sent from Lithuania aboard DHL cargo flights to Germany and the UK exploded at Leipzig after flight delays averted a major catastrophe. The report identifies single-use agents recruited via platforms like Telegram and highlights Russia's unhesitant use of lethal means to destabilize. Other incidents include a May 2025 Rostock port fire causing multi-million euro damage, sabotage targeting German defense industry leaders, cyber-attacks disrupting services, and exploitation of migrant flows from Belarus. Political influence tools include backing for the AfD party to heighten societal tensions. Germany is responding with deployment of Israeli-made Arrow-3 ballistic missile defense systems and founding specialized drone defense units to prepare for layered threats on infrastructure and security. Experts emphasize Germany remains under persistent hybrid threat pressure from Russia, underscoring a strategic imperative to bolster deterrence and resilience.",
"actor_primary": "Russian intelligence services",
"target_primary": null,
"location_text": "Leipzig, Rostock, Bremen, Schönewalde",
"location_region": null,
"location_coordinates_lat": null,
"location_coordinates_lon": null,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "DEFENSE_PREP_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article provides clear evidence of Russian hybrid operations against Germany including sabotage, espionage, political influence, and cyberattacks, as well as German defensive measures including missile defense deployments and new counter-drone units, making both aggressor and defense preparation signals evident with high confidence.",
"event_time_utc": "2025-07-01T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "pm24h",
"created_at": "2026-03-23T15:50:01.429Z",
"updated_at": "2026-11-04T08:35:32.139Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "within_24h",
"severity_band": "significant",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
B
Info credibility
3
Event time
Jul 1, 2025, 00:00 UTC
Event time confidence
pm24h
Location
Leipzig, Rostock, Bremen, Schönewalde
Primary actor
Russian intelligence services
Country
Germany
Tags
Russia, Germany, Hybrid Warfare, Sabotage, Espionage, Political Influence, Cyber Attack, Drones, Missile Defense, Lithuania, AfD, Voice of Europe
Nodes
Node 1: Borders, Node 2: 5th Column, Node 3: Political Disruptions