German authorities arrested three Ukrainian nationals accused of plotting arson and explosive package attacks allegedly on behalf of Russian state interests in Germany and Switzerland in March 2024.

Terrorism & Criminal Proxy TacticsTerrorismBomb threats, assassination plots, targeted killings

Aggressor

Summary

In March 2024, German state prosecutors announced the arrest of three Ukrainian nationals in Cologne, Konstanz (Germany), and Thurgau (Switzerland) for allegedly plotting arson and explosive attacks on freight transport. The suspects declared willingness to ship parcels containing explosive and incendiary devices from Germany to Ukraine that would detonate during transit, purportedly acting on behalf of Russian authorities. Two additional men, Yevhen B and Daniil B, are accused of aiding the shipment and package contents. German officials have linked these arrests to a broader pattern of Russian hybrid warfare targeting European countries, including sabotage incidents like fires at retail stores in Vilnius and Poland, undersea cable attacks in the Baltic Sea, drone surveillance near military bases, and influence attempts during Germany’s February 2024 parliamentary elections. Chancellor Friedrich Merz condemned the actions as systemic espionage and sabotage orchestrated by the Russian leadership. German intelligence warned previously of aggressive Russian actions, including a narrowly averted plane fire from an explosive parcel. Other suspects were also arrested for staged vandalism targeting German Green party vehicles with apparent Russian direction.

Classification

Confidence: High

The event clearly describes Russian-directed hostile actions involving conspirators plotting arson and explosive attacks in Germany, supported by arrests and official prosecution statements, categorizing as aggressor activity.

Source URL

https://archive.is/W0Uu7

Open source

Provenance

Publisher: extension
Submitted: Feb 14, 2026, 12:22 UTC
Last updated: Nov 10, 2026, 02:39 UTC
Event time: Mar 1, 2024, 00:00 UTC

Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.

Raw record

{
  "id": "37698049-a463-4d50-a17b-c58868bf2ba9",
  "url": "https://archive.is/W0Uu7",
  "source": "extension",
  "status": "approved",
  "category": "Terrorism & Criminal Proxy Tactics",
  "subcategory": "Terrorism",
  "incident_type": "Bomb threats, assassination plots, targeted killings",
  "country": "Germany",
  "source_reliability": "B",
  "info_credibility": "3",
  "tags": [
    "Russia",
    "Germany",
    "Ukraine",
    "Hybrid warfare",
    "Arson plot",
    "Explosive packages",
    "Sabotage",
    "Espionage",
    "Russian agents",
    "Parcel bombs",
    "Disinformation",
    "Drone surveillance",
    "Undersea cable attacks",
    "Election interference"
  ],
  "nodes": [
    "Node 1: Borders",
    "Node 2: 5th Column"
  ],
  "countries": [
    "Germany",
    "Switzerland"
  ],
  "where_text": "Land",
  "headline": null,
  "description": "In March 2024, German state prosecutors announced the arrest of three Ukrainian nationals in Cologne, Konstanz (Germany), and Thurgau (Switzerland) for allegedly plotting arson and explosive attacks on freight transport. The suspects declared willingness to ship parcels containing explosive and incendiary devices from Germany to Ukraine that would detonate during transit, purportedly acting on behalf of Russian authorities. Two additional men, Yevhen B and Daniil B, are accused of aiding the shipment and package contents. German officials have linked these arrests to a broader pattern of Russian hybrid warfare targeting European countries, including sabotage incidents like fires at retail stores in Vilnius and Poland, undersea cable attacks in the Baltic Sea, drone surveillance near military bases, and influence attempts during Germany’s February 2024 parliamentary elections. Chancellor Friedrich Merz condemned the actions as systemic espionage and sabotage orchestrated by the Russian leadership. German intelligence warned previously of aggressive Russian actions, including a narrowly averted plane fire from an explosive parcel. Other suspects were also arrested for staged vandalism targeting German Green party vehicles with apparent Russian direction.",
  "summary_short": "German authorities arrested three Ukrainian nationals accused of plotting arson and explosive package attacks allegedly on behalf of Russian state interests in Germany and Switzerland in March 2024.",
  "summary_extended": null,
  "actor_primary": "German state prosecutors",
  "target_primary": null,
  "location_text": "Cologne, Konstanz, Germany; Thurgau, Switzerland",
  "location_region": null,
  "location_coordinates_lat": 50.9375,
  "location_coordinates_lon": 6.9603,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The event clearly describes Russian-directed hostile actions involving conspirators plotting arson and explosive attacks in Germany, supported by arrests and official prosecution statements, categorizing as aggressor activity.",
  "event_time_utc": "2024-03-01T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "pm24h",
  "created_at": "2026-02-14T12:22:49.787Z",
  "updated_at": "2026-11-10T02:39:50.774Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "within_24h",
  "severity_band": "moderate",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

Public assessmentReliability: StrongSeverity: ModerateAttribution: HighSingle sourceTime: Same dayLocation: Approximate

Source reliability

Info credibility

Event time

Mar 1, 2024, 00:00 UTC

Event time confidence

pm24h

Location

Cologne, Konstanz, Germany; Thurgau, Switzerland

Primary actor

German state prosecutors

Country

Germany

Countries

Germany, Switzerland

Tags

Russia, Germany, Ukraine, Hybrid warfare, Arson plot, Explosive packages, Sabotage, Espionage, Russian agents, Parcel bombs, Disinformation, Drone surveillance, Undersea cable attacks, Election interference

Nodes

Node 1: Borders, Node 2: 5th Column

Loading signal...

{ "id": "37698049-a463-4d50-a17b-c58868bf2ba9", "url": "https://archive.is/W0Uu7", "source": "extension", "status": "approved", "category": "Terrorism & Criminal Proxy Tactics", "subcategory": "Terrorism", "incident_type": "Bomb threats, assassination plots, targeted killings", "country": "Germany", "source_reliability": "B", "info_credibility": "3", "tags": [ "Russia", "Germany", "Ukraine", "Hybrid warfare", "Arson plot", "Explosive packages", "Sabotage", "Espionage", "Russian agents", "Parcel bombs", "Disinformation", "Drone surveillance", "Undersea cable attacks", "Election interference" ], "nodes": [ "Node 1: Borders", "Node 2: 5th Column" ], "countries": [ "Germany", "Switzerland" ], "where_text": "Land", "headline": null, "description": "In March 2024, German state prosecutors announced the arrest of three Ukrainian nationals in Cologne, Konstanz (Germany), and Thurgau (Switzerland) for allegedly plotting arson and explosive attacks on freight transport. The suspects declared willingness to ship parcels containing explosive and incendiary devices from Germany to Ukraine that would detonate during transit, purportedly acting on behalf of Russian authorities. Two additional men, Yevhen B and Daniil B, are accused of aiding the shipment and package contents. German officials have linked these arrests to a broader pattern of Russian hybrid warfare targeting European countries, including sabotage incidents like fires at retail stores in Vilnius and Poland, undersea cable attacks in the Baltic Sea, drone surveillance near military bases, and influence attempts during Germany’s February 2024 parliamentary elections. Chancellor Friedrich Merz condemned the actions as systemic espionage and sabotage orchestrated by the Russian leadership. German intelligence warned previously of aggressive Russian actions, including a narrowly averted plane fire from an explosive parcel. Other suspects were also arrested for staged vandalism targeting German Green party vehicles with apparent Russian direction.", "summary_short": "German authorities arrested three Ukrainian nationals accused of plotting arson and explosive package attacks allegedly on behalf of Russian state interests in Germany and Switzerland in March 2024.", "summary_extended": null, "actor_primary": "German state prosecutors", "target_primary": null, "location_text": "Cologne, Konstanz, Germany; Thurgau, Switzerland", "location_region": null, "location_coordinates_lat": 50.9375, "location_coordinates_lon": 6.9603, "location_precision": "Approximate", "is_aggressor_signal": true, "signal_type": "HYBRID_SIGNAL", "is_hybrid_war_signal": true, "classification_complete": true, "hybrid_signal_complete": true, "classification_confidence": "High", "classification_rationale": "The event clearly describes Russian-directed hostile actions involving conspirators plotting arson and explosive attacks in Germany, supported by arrests and official prosecution statements, categorizing as aggressor activity.", "event_time_utc": "2024-03-01T00:00:00.000Z", "end_time_utc": null, "event_time_confidence": "pm24h", "created_at": "2026-02-14T12:22:49.787Z", "updated_at": "2026-11-10T02:39:50.774Z", "reliability_band": "strong", "location_precision_band": "approximate", "time_precision_band": "within_24h", "severity_band": "moderate", "attribution_confidence_band": "high", "attribution_basis": "single_source" }