German prosecutors charged two Ukrainians in a Russian-backed parcel bomb plot to attack postal and freight facilities across Europe in 2023.

Terrorism & Criminal Proxy TacticsTerrorismBomb threats, assassination plots, targeted killings

Aggressor

Summary

In 2023, German prosecutors charged two Ukrainian men, Daniil B and Vladyslav T, with espionage related to a Russian plot aiming to bomb postal depots in Germany and Eastern Europe. The men sent GPS-tracked parcels to identify logistics routes for future packages intended to contain explosives designed to cause widespread destruction and undermine civilian security. A third Ukrainian, Yevhen B, extradited from Switzerland, was supervised from Moscow via a Mariupol intermediary. Similar plots emerged in Lithuania and Poland, including a Lithuanian cell accused of sending explosive packages to warehouses in Germany, the UK, and Poland, and a Russian-placed bomb on the Warsaw-Lublin railway narrowly averted disaster. These acts are part of a broader Russian sabotage campaign across Europe, increasingly using proxies contracted via encrypted messaging apps due to depleted Russian intelligence assets. The campaign demonstrates increased willingness by Russian intelligence to cause civilian harm.

Classification

Confidence: High

The article explicitly details a Russian intelligence-backed plot involving parcel bombs sent across Europe with intent to cause civilian harm, naming actors, actions, and timing, clearly fitting aggressor activity.

Source URL

https://archive.is/VBYiq

Open source

Provenance

Publisher: extension
Submitted: Feb 14, 2026, 12:22 UTC
Last updated: Nov 4, 2026, 08:35 UTC
Event time: Nov 30, 2023, 00:00 UTC

Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.

Raw record

{
  "id": "0bd3c8b2-5ac6-457c-94fe-34ea1b53d517",
  "url": "https://archive.is/VBYiq",
  "source": "extension",
  "status": "approved",
  "category": "Terrorism & Criminal Proxy Tactics",
  "subcategory": "Terrorism",
  "incident_type": "Bomb threats, assassination plots, targeted killings",
  "country": "Germany",
  "source_reliability": "B",
  "info_credibility": "3",
  "tags": [
    "russian intelligence operations",
    "parcel bombs",
    "espionage",
    "saboteurs",
    "postal depots",
    "military logistics",
    "explosives",
    "european union",
    "proxy operatives",
    "Moscow",
    "Mariupol",
    "Telegram",
    "counterintelligence",
    "train bombing attempt",
    "Lithuania",
    "Germany",
    "Poland",
    "Switzerland"
  ],
  "nodes": [
    "Node 1: Borders",
    "Node 2: 5th Column"
  ],
  "countries": [],
  "where_text": "Land",
  "headline": null,
  "description": "German prosecutors have charged two Ukrainian men, Daniil B and Vladyslav T, with espionage for their roles in a Russian-orchestrated plot in 2023 to bomb postal depots and freight centers in Germany and Eastern Europe. The suspects used GPS tracker parcels to map routes and facilities for future attacks involving explosive devices concealed in packages. A third Ukrainian, Yevhen B, extradited from Switzerland, acted on orders from Moscow through an intermediary in Mariupol. Similar operations include a Lithuanian cell charged in September 2023 for sending explosive packages via DHL and DPD to Germany, the UK, and Poland, with three parcels igniting at warehouses causing limited damage. Poland thwarted a potentially deadly bombing attempt on the Warsaw-Lublin railway line in November 2023 due to the alertness of a train driver. Russian intelligence has increasingly resorted to proxy operatives recruited via Telegram and criminal networks because of diminished capacity in Europe, focusing on sabotage and terror tactics with potential civilian casualties. Officials warn of rising recklessness in Moscow's sabotage efforts targeting European infrastructure and transports.",
  "summary_short": "German prosecutors charged two Ukrainians in a Russian-backed parcel bomb plot to attack postal and freight facilities across Europe in 2023.",
  "summary_extended": "In 2023, German prosecutors charged two Ukrainian men, Daniil B and Vladyslav T, with espionage related to a Russian plot aiming to bomb postal depots in Germany and Eastern Europe. The men sent GPS-tracked parcels to identify logistics routes for future packages intended to contain explosives designed to cause widespread destruction and undermine civilian security. A third Ukrainian, Yevhen B, extradited from Switzerland, was supervised from Moscow via a Mariupol intermediary. Similar plots emerged in Lithuania and Poland, including a Lithuanian cell accused of sending explosive packages to warehouses in Germany, the UK, and Poland, and a Russian-placed bomb on the Warsaw-Lublin railway narrowly averted disaster. These acts are part of a broader Russian sabotage campaign across Europe, increasingly using proxies contracted via encrypted messaging apps due to depleted Russian intelligence assets. The campaign demonstrates increased willingness by Russian intelligence to cause civilian harm.",
  "actor_primary": "Russian intelligence agency",
  "target_primary": null,
  "location_text": "Germany, Switzerland, Lithuania, Poland, Mariupol (Ukraine)",
  "location_region": null,
  "location_coordinates_lat": 51.1657,
  "location_coordinates_lon": 10.4515,
  "location_precision": "Regional",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The article explicitly details a Russian intelligence-backed plot involving parcel bombs sent across Europe with intent to cause civilian harm, naming actors, actions, and timing, clearly fitting aggressor activity.",
  "event_time_utc": "2023-11-30T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "pm24h",
  "created_at": "2026-02-14T12:22:48.728Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "regional",
  "time_precision_band": "within_24h",
  "severity_band": "significant",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

Public assessmentReliability: StrongSeverity: SignificantAttribution: HighSingle sourceTime: Same dayLocation: Regional

Source reliability

Info credibility

Event time

Nov 30, 2023, 00:00 UTC

Event time confidence

pm24h

Location

Germany, Switzerland, Lithuania, Poland, Mariupol (Ukraine)

Primary actor

Russian intelligence agency

Country

Germany

Tags

russian intelligence operations, parcel bombs, espionage, saboteurs, postal depots, military logistics, explosives, european union, proxy operatives, Moscow, Mariupol, Telegram, counterintelligence, train bombing attempt, Lithuania, Germany, Poland, Switzerland

Nodes

Node 1: Borders, Node 2: 5th Column

Loading signal...

{ "id": "0bd3c8b2-5ac6-457c-94fe-34ea1b53d517", "url": "https://archive.is/VBYiq", "source": "extension", "status": "approved", "category": "Terrorism & Criminal Proxy Tactics", "subcategory": "Terrorism", "incident_type": "Bomb threats, assassination plots, targeted killings", "country": "Germany", "source_reliability": "B", "info_credibility": "3", "tags": [ "russian intelligence operations", "parcel bombs", "espionage", "saboteurs", "postal depots", "military logistics", "explosives", "european union", "proxy operatives", "Moscow", "Mariupol", "Telegram", "counterintelligence", "train bombing attempt", "Lithuania", "Germany", "Poland", "Switzerland" ], "nodes": [ "Node 1: Borders", "Node 2: 5th Column" ], "countries": [], "where_text": "Land", "headline": null, "description": "German prosecutors have charged two Ukrainian men, Daniil B and Vladyslav T, with espionage for their roles in a Russian-orchestrated plot in 2023 to bomb postal depots and freight centers in Germany and Eastern Europe. The suspects used GPS tracker parcels to map routes and facilities for future attacks involving explosive devices concealed in packages. A third Ukrainian, Yevhen B, extradited from Switzerland, acted on orders from Moscow through an intermediary in Mariupol. Similar operations include a Lithuanian cell charged in September 2023 for sending explosive packages via DHL and DPD to Germany, the UK, and Poland, with three parcels igniting at warehouses causing limited damage. Poland thwarted a potentially deadly bombing attempt on the Warsaw-Lublin railway line in November 2023 due to the alertness of a train driver. Russian intelligence has increasingly resorted to proxy operatives recruited via Telegram and criminal networks because of diminished capacity in Europe, focusing on sabotage and terror tactics with potential civilian casualties. Officials warn of rising recklessness in Moscow's sabotage efforts targeting European infrastructure and transports.", "summary_short": "German prosecutors charged two Ukrainians in a Russian-backed parcel bomb plot to attack postal and freight facilities across Europe in 2023.", "summary_extended": "In 2023, German prosecutors charged two Ukrainian men, Daniil B and Vladyslav T, with espionage related to a Russian plot aiming to bomb postal depots in Germany and Eastern Europe. The men sent GPS-tracked parcels to identify logistics routes for future packages intended to contain explosives designed to cause widespread destruction and undermine civilian security. A third Ukrainian, Yevhen B, extradited from Switzerland, was supervised from Moscow via a Mariupol intermediary. Similar plots emerged in Lithuania and Poland, including a Lithuanian cell accused of sending explosive packages to warehouses in Germany, the UK, and Poland, and a Russian-placed bomb on the Warsaw-Lublin railway narrowly averted disaster. These acts are part of a broader Russian sabotage campaign across Europe, increasingly using proxies contracted via encrypted messaging apps due to depleted Russian intelligence assets. The campaign demonstrates increased willingness by Russian intelligence to cause civilian harm.", "actor_primary": "Russian intelligence agency", "target_primary": null, "location_text": "Germany, Switzerland, Lithuania, Poland, Mariupol (Ukraine)", "location_region": null, "location_coordinates_lat": 51.1657, "location_coordinates_lon": 10.4515, "location_precision": "Regional", "is_aggressor_signal": true, "signal_type": "HYBRID_SIGNAL", "is_hybrid_war_signal": true, "classification_complete": true, "hybrid_signal_complete": true, "classification_confidence": "High", "classification_rationale": "The article explicitly details a Russian intelligence-backed plot involving parcel bombs sent across Europe with intent to cause civilian harm, naming actors, actions, and timing, clearly fitting aggressor activity.", "event_time_utc": "2023-11-30T00:00:00.000Z", "end_time_utc": null, "event_time_confidence": "pm24h", "created_at": "2026-02-14T12:22:48.728Z", "updated_at": "2026-11-04T08:35:32.139Z", "reliability_band": "strong", "location_precision_band": "regional", "time_precision_band": "within_24h", "severity_band": "significant", "attribution_confidence_band": "high", "attribution_basis": "single_source" }