Following Russia's 2022 invasion of Ukraine, Moscow has utilized a shadow fleet of tankers circumventing sanctions. Intelligence sources report that these ships now carry covert Russian operatives from Moran Security, a firm tied to the Russian military, intelligence and Wagner PMC. These operatives aboard ships registered to other countries oversee crews primarily of non-Russian sailors, conduct surveillance including photographing European military sites, and potentially sabotage activities. The tanker Boracay, active in late 2025, was linked to drone disruptions at Danish airports shortly after departing Russia’s Primorsk port. French military boarded Boracay in Brittany in October 2025, arresting the Chinese captain and questioning two Russians identified as Moran personnel. Moran Security originated with links to Wagner and employs former special forces and FSB officers. European security services consider such shadow fleet militarization an advanced hybrid warfare method, enabled by plausible deniability, to project Russian influence and espionage near NATO coasts. Calls for multinational European regulatory responses have met political caution due to the risks of Russian retaliation. This marks a notable escalation in Kremlin hybrid operations using commercial shipping assets.

Following Russia's 2022 invasion of Ukraine, Moscow has utilized a shadow fleet of tankers circumventing sanctions. Intelligence sources report that these ships now carry covert Russian operatives from Moran Security, a firm tied to the Russian military, intelligence and Wagner PMC. These operatives aboard ships registered to other countries oversee crews primarily of non-Russian sailors, conduct surveillance including photographing European military sites, and potentially sabotage activities. The tanker Boracay, active in late 2025, was linked to drone disruptions at Danish airports shortly after departing Russia’s Primorsk port. French military boarded Boracay in Brittany in October 2025, arresting the Chinese captain and questioning two Russians identified as Moran personnel. Moran Security originated with links to Wagner and employs former special forces and FSB officers. European security services consider such shadow fleet militarization an advanced hybrid warfare method, enabled by plausible deniability, to project Russian influence and espionage near NATO coasts. Calls for multinational European regulatory responses have met political caution due to the risks of Russian retaliation. This marks a notable escalation in Kremlin hybrid operations using commercial shipping assets.