Signal
Submitted
Feb 1, 2026, 00:14 UTC
Incendiary parcels sent from Lithuania via DHL planes in summer 2024 were part of a Russian covert operation aiming to cause fires on cargo or passenger flights to North America.
In summer 2024, several incendiary devices sent from Lithuania on DHL planes caused fires at parcel warehouses in Germany and the UK, notably near Birmingham. The parcels contained electric massagers with magnesium-based flammable material. Investigations revealed this as a Russian covert operation to test shipments potentially starting fires on planes bound for the US and Canada. Lithuanian police arrested a suspect in Vilnius, known as Alexander Suranov, believed to be a proxy for Russian spy services. Polish authorities detained four suspects linked to international sabotage sending explosive parcels to EU and UK countries. NATO officials emphasized the need to respond to these operations to prevent escalation, identifying Russian military intelligence as the source. The UK police counter-terrorism and Lithuanian law enforcement agencies are cooperating on the investigations.
Confidence: High
The content clearly describes a hostile Russian covert sabotage operation involving incendiary parcels sent from Lithuania to cause fires on planes and warehouses, constituting aggressor activity. The primary subject is the hostile incident itself, with detailed reporting of arrests and ongoing investigations, making HYBRID_SIGNAL the correct classification rather than focusing on allied defense preparations.
Source URL
https://lrt.lt/en/news-in-english/19/2405496/incendiary-parcels-sent-from-lithuania-as-part-of-russian-covert-operation-media
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "37deba9a-d681-48b6-b414-5e51a51c22bc",
"url": "https://lrt.lt/en/news-in-english/19/2405496/incendiary-parcels-sent-from-lithuania-as-part-of-russian-covert-operation-media",
"source": "extension",
"status": "approved",
"category": "Terrorism & Criminal Proxy Tactics",
"subcategory": "Terrorism",
"incident_type": "Bomb threats, assassination plots, targeted killings",
"country": "Lithuania",
"source_reliability": "A",
"info_credibility": "2",
"tags": [
"incendiary parcels",
"Russian covert operation",
"Lithuania",
"sabotage",
"DHL shipments",
"fire incidents",
"proxy agents",
"Russian military intelligence",
"law enforcement cooperation",
"nato responses"
],
"nodes": [
"Node 1: Borders"
],
"countries": [],
"where_text": "Land",
"headline": null,
"description": "According to The Wall Street Journal, incendiary parcels sent from Lithuania on DHL planes during summer 2024 were part of a covert Russian operation to start fires on air freight and passenger planes destined for the US and Canada. One parcel caused a fire in a German warehouse and another in a UK DHL warehouse near Birmingham, where electric massagers implanted with magnesium-based flammable materials ignited. Lithuanian police arrested a suspect in Vilnius named Alexander Suranov (alias Igor Prudnikov), suspected of acting as a proxy for Russian intelligence. Polish authorities arrested four individuals connected to international sabotage operations involving disguised explosives sent to the UK and EU, aiming to test shipping channels for attacks targeting North America. NATO officials, including Lithuania's national security advisor Kęstutis Budrys, expressed concern and called for a strong response. The Kremlin denied the allegations. UK police counter-terrorism teams are cooperating with European partners, including Lithuanian agencies, to investigate. A US government official stated there is currently no active threat to US-bound planes.",
"summary_short": "Incendiary parcels sent from Lithuania via DHL planes in summer 2024 were part of a Russian covert operation aiming to cause fires on cargo or passenger flights to North America.",
"summary_extended": "In summer 2024, several incendiary devices sent from Lithuania on DHL planes caused fires at parcel warehouses in Germany and the UK, notably near Birmingham. The parcels contained electric massagers with magnesium-based flammable material. Investigations revealed this as a Russian covert operation to test shipments potentially starting fires on planes bound for the US and Canada. Lithuanian police arrested a suspect in Vilnius, known as Alexander Suranov, believed to be a proxy for Russian spy services. Polish authorities detained four suspects linked to international sabotage sending explosive parcels to EU and UK countries. NATO officials emphasized the need to respond to these operations to prevent escalation, identifying Russian military intelligence as the source. The UK police counter-terrorism and Lithuanian law enforcement agencies are cooperating on the investigations.",
"actor_primary": "Russian military intelligence",
"target_primary": null,
"location_text": "DHL store in Vilnius, Lithuania; parcel warehouse near Birmingham, UK; Germany parcel warehouse; locations in Poland",
"location_region": null,
"location_coordinates_lat": null,
"location_coordinates_lon": null,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The content clearly describes a hostile Russian covert sabotage operation involving incendiary parcels sent from Lithuania to cause fires on planes and warehouses, constituting aggressor activity. The primary subject is the hostile incident itself, with detailed reporting of arrests and ongoing investigations, making HYBRID_SIGNAL the correct classification rather than focusing on allied defense preparations.",
"event_time_utc": "2024-07-01T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "unknown",
"created_at": "2026-02-01T00:14:29.636Z",
"updated_at": "2026-11-04T08:36:03.522Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "unknown",
"severity_band": "significant",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
A
Info credibility
2
Event time
Jul 1, 2024, 00:00 UTC
Event time confidence
unknown
Location
DHL store in Vilnius, Lithuania; parcel warehouse near Birmingham, UK; Germany parcel warehouse; locations in Poland
Primary actor
Russian military intelligence
Country
Lithuania
Tags
incendiary parcels, Russian covert operation, Lithuania, sabotage, DHL shipments, fire incidents, proxy agents, Russian military intelligence, law enforcement cooperation, nato responses
Nodes
Node 1: Borders
Signal
Submitted
Feb 1, 2026, 00:14 UTC
Incendiary parcels sent from Lithuania via DHL planes in summer 2024 were part of a Russian covert operation aiming to cause fires on cargo or passenger flights to North America.
In summer 2024, several incendiary devices sent from Lithuania on DHL planes caused fires at parcel warehouses in Germany and the UK, notably near Birmingham. The parcels contained electric massagers with magnesium-based flammable material. Investigations revealed this as a Russian covert operation to test shipments potentially starting fires on planes bound for the US and Canada. Lithuanian police arrested a suspect in Vilnius, known as Alexander Suranov, believed to be a proxy for Russian spy services. Polish authorities detained four suspects linked to international sabotage sending explosive parcels to EU and UK countries. NATO officials emphasized the need to respond to these operations to prevent escalation, identifying Russian military intelligence as the source. The UK police counter-terrorism and Lithuanian law enforcement agencies are cooperating on the investigations.
Confidence: High
The content clearly describes a hostile Russian covert sabotage operation involving incendiary parcels sent from Lithuania to cause fires on planes and warehouses, constituting aggressor activity. The primary subject is the hostile incident itself, with detailed reporting of arrests and ongoing investigations, making HYBRID_SIGNAL the correct classification rather than focusing on allied defense preparations.
Source URL
https://lrt.lt/en/news-in-english/19/2405496/incendiary-parcels-sent-from-lithuania-as-part-of-russian-covert-operation-media
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "37deba9a-d681-48b6-b414-5e51a51c22bc",
"url": "https://lrt.lt/en/news-in-english/19/2405496/incendiary-parcels-sent-from-lithuania-as-part-of-russian-covert-operation-media",
"source": "extension",
"status": "approved",
"category": "Terrorism & Criminal Proxy Tactics",
"subcategory": "Terrorism",
"incident_type": "Bomb threats, assassination plots, targeted killings",
"country": "Lithuania",
"source_reliability": "A",
"info_credibility": "2",
"tags": [
"incendiary parcels",
"Russian covert operation",
"Lithuania",
"sabotage",
"DHL shipments",
"fire incidents",
"proxy agents",
"Russian military intelligence",
"law enforcement cooperation",
"nato responses"
],
"nodes": [
"Node 1: Borders"
],
"countries": [],
"where_text": "Land",
"headline": null,
"description": "According to The Wall Street Journal, incendiary parcels sent from Lithuania on DHL planes during summer 2024 were part of a covert Russian operation to start fires on air freight and passenger planes destined for the US and Canada. One parcel caused a fire in a German warehouse and another in a UK DHL warehouse near Birmingham, where electric massagers implanted with magnesium-based flammable materials ignited. Lithuanian police arrested a suspect in Vilnius named Alexander Suranov (alias Igor Prudnikov), suspected of acting as a proxy for Russian intelligence. Polish authorities arrested four individuals connected to international sabotage operations involving disguised explosives sent to the UK and EU, aiming to test shipping channels for attacks targeting North America. NATO officials, including Lithuania's national security advisor Kęstutis Budrys, expressed concern and called for a strong response. The Kremlin denied the allegations. UK police counter-terrorism teams are cooperating with European partners, including Lithuanian agencies, to investigate. A US government official stated there is currently no active threat to US-bound planes.",
"summary_short": "Incendiary parcels sent from Lithuania via DHL planes in summer 2024 were part of a Russian covert operation aiming to cause fires on cargo or passenger flights to North America.",
"summary_extended": "In summer 2024, several incendiary devices sent from Lithuania on DHL planes caused fires at parcel warehouses in Germany and the UK, notably near Birmingham. The parcels contained electric massagers with magnesium-based flammable material. Investigations revealed this as a Russian covert operation to test shipments potentially starting fires on planes bound for the US and Canada. Lithuanian police arrested a suspect in Vilnius, known as Alexander Suranov, believed to be a proxy for Russian spy services. Polish authorities detained four suspects linked to international sabotage sending explosive parcels to EU and UK countries. NATO officials emphasized the need to respond to these operations to prevent escalation, identifying Russian military intelligence as the source. The UK police counter-terrorism and Lithuanian law enforcement agencies are cooperating on the investigations.",
"actor_primary": "Russian military intelligence",
"target_primary": null,
"location_text": "DHL store in Vilnius, Lithuania; parcel warehouse near Birmingham, UK; Germany parcel warehouse; locations in Poland",
"location_region": null,
"location_coordinates_lat": null,
"location_coordinates_lon": null,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The content clearly describes a hostile Russian covert sabotage operation involving incendiary parcels sent from Lithuania to cause fires on planes and warehouses, constituting aggressor activity. The primary subject is the hostile incident itself, with detailed reporting of arrests and ongoing investigations, making HYBRID_SIGNAL the correct classification rather than focusing on allied defense preparations.",
"event_time_utc": "2024-07-01T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "unknown",
"created_at": "2026-02-01T00:14:29.636Z",
"updated_at": "2026-11-04T08:36:03.522Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "unknown",
"severity_band": "significant",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
A
Info credibility
2
Event time
Jul 1, 2024, 00:00 UTC
Event time confidence
unknown
Location
DHL store in Vilnius, Lithuania; parcel warehouse near Birmingham, UK; Germany parcel warehouse; locations in Poland
Primary actor
Russian military intelligence
Country
Lithuania
Tags
incendiary parcels, Russian covert operation, Lithuania, sabotage, DHL shipments, fire incidents, proxy agents, Russian military intelligence, law enforcement cooperation, nato responses
Nodes
Node 1: Borders