UK Convicts British Men for Russian Wagner Group-Backed Arson Plot, Highlighting Growing Hybrid Threats

Military & Paramilitary OperationsUnconventional / ParamilitaryProxy forces, militias, mercenaries (e.g. Wagner-type groups)

AggressorDefense

Summary

Three British men were convicted in March 2024 for an arson plot orchestrated by Russia's Wagner Group targeting a London warehouse supplying aid to Ukraine, part of wider Russian hybrid sabotage threats in Europe.

In March 2024, three men from south London—Nii Kojo Mensah, Jakeem Rose, and Ugnius Asmena—were found guilty of aggravated arson at a warehouse in Leyton, east London, destroying about £100,000 worth of humanitarian aid bound for Ukraine. This attack was linked to the Russian mercenary group Wagner, which recruited the operatives via Telegram propaganda channels targeting vulnerable British criminals. The plot was part of a broader wave of Russian hybrid warfare tactics including arson, sabotage of undersea cables, cyber hacks, and drone incursions against NATO members, investigated by a NATO hybrid warfare taskforce working with UK security services. NATO officials highlight the difficulty in countering such proxies who operate through covert recruitment, often paid in untraceable cryptocurrency. Lithuania and Poland have established dedicated units to combat similar Russian sabotage efforts. UK intelligence and security agencies see these disposable recruits as part of a Kremlin strategy to create chaos and erode public trust in western governments. Security minister Dan Jarvis stated the UK criminal justice system will act firmly against those working on behalf of Russia. These developments underscore the increasing focus on hybrid threats beyond traditional military confrontations.

Classification

Confidence: High

The article clearly details Russian hybrid warfare aggression via proxy forces conducting sabotage on UK soil, alongside NATO and UK authorities actively investigating, countering, and preparing defenses against these attacks. Both aggressor and defense preparation signals are explicit with credible named actors and events.

Source URL

https://archive.is/RV4B9

Open source

Provenance

Publisher: extension
Submitted: Feb 14, 2026, 12:22 UTC
Last updated: Nov 4, 2026, 08:35 UTC
Event time: Mar 26, 2024, 00:00 UTC

Published as a Defense Preparations signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.

Raw record

{
  "id": "3c1ecb65-b966-40a0-b88b-163b1e23e333",
  "url": "https://archive.is/RV4B9",
  "source": "extension",
  "status": "approved",
  "category": "Military & Paramilitary Operations",
  "subcategory": "Unconventional / Paramilitary",
  "incident_type": "Proxy forces, militias, mercenaries (e.g. Wagner-type groups)",
  "country": "United Kingdom",
  "source_reliability": "B",
  "info_credibility": "3",
  "tags": [
    "Russian hybrid warfare",
    "Wagner Group",
    "arson attack",
    "UK security",
    "Telegram recruitment",
    "proxy forces",
    "cryptocurrency payments",
    "NATO hybrid taskforce",
    "Russian sabotage",
    "Leyton"
  ],
  "nodes": [
    "Node 2: 5th Column"
  ],
  "countries": [],
  "where_text": "Land",
  "headline": "UK Convicts British Men for Russian Wagner Group-Backed Arson Plot, Highlighting Growing Hybrid Threats",
  "description": "A NATO hybrid warfare taskforce working with UK security services is investigating a series of suspected Russian sabotage attacks on UK soil, including an arson attack on a London warehouse delivering humanitarian aid to Ukraine. Three men from south London—Nii Kojo Mensah, Jakeem Rose, and Ugnius Asmena—were found guilty of plots orchestrated by the Russian mercenary Wagner Group to destabilize and cause fear. The group recruited low-level criminals via Telegram channels, paying in cryptocurrency to carry out acts ranging from photography of military shipments to arson. UK intelligence sources and NATO officials warn these acts are coordinated hybrid attacks aiming to erode trust in governments and portray them as weak. Lithuania and Poland have similarly developed counter-sabotage efforts in response, with concerns about the disposable and easily recruited nature of operatives. UK officials, including MI5 and the Met’s counterterrorism command, emphasize the Kremlin’s sustained mission to sow chaos using proxy criminals. The UK government vows full legal consequences for those acting on Russia’s behalf.",
  "summary_short": "Three British men were convicted in March 2024 for an arson plot orchestrated by Russia's Wagner Group targeting a London warehouse supplying aid to Ukraine, part of wider Russian hybrid sabotage threats in Europe.",
  "summary_extended": "In March 2024, three men from south London—Nii Kojo Mensah, Jakeem Rose, and Ugnius Asmena—were found guilty of aggravated arson at a warehouse in Leyton, east London, destroying about £100,000 worth of humanitarian aid bound for Ukraine. This attack was linked to the Russian mercenary group Wagner, which recruited the operatives via Telegram propaganda channels targeting vulnerable British criminals. The plot was part of a broader wave of Russian hybrid warfare tactics including arson, sabotage of undersea cables, cyber hacks, and drone incursions against NATO members, investigated by a NATO hybrid warfare taskforce working with UK security services. NATO officials highlight the difficulty in countering such proxies who operate through covert recruitment, often paid in untraceable cryptocurrency. Lithuania and Poland have established dedicated units to combat similar Russian sabotage efforts. UK intelligence and security agencies see these disposable recruits as part of a Kremlin strategy to create chaos and erode public trust in western governments. Security minister Dan Jarvis stated the UK criminal justice system will act firmly against those working on behalf of Russia. These developments underscore the increasing focus on hybrid threats beyond traditional military confrontations.",
  "actor_primary": "Wagner Group",
  "target_primary": null,
  "location_text": "Leyton, East London",
  "location_region": "London",
  "location_coordinates_lat": null,
  "location_coordinates_lon": null,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "DEFENSE_PREP_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The article clearly details Russian hybrid warfare aggression via proxy forces conducting sabotage on UK soil, alongside NATO and UK authorities actively investigating, countering, and preparing defenses against these attacks. Both aggressor and defense preparation signals are explicit with credible named actors and events.",
  "event_time_utc": "2024-03-26T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "unknown",
  "created_at": "2026-02-14T12:22:50.497Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "unknown",
  "severity_band": "moderate",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

Public assessmentReliability: StrongSeverity: ModerateAttribution: HighSingle sourceTime: UnknownLocation: Approximate

Source reliability

Info credibility

Event time

Mar 26, 2024, 00:00 UTC

Event time confidence

unknown

Location

Leyton, East London

Region

London

Primary actor

Wagner Group

Country

United Kingdom

Tags

Russian hybrid warfare, Wagner Group, arson attack, UK security, Telegram recruitment, proxy forces, cryptocurrency payments, NATO hybrid taskforce, Russian sabotage, Leyton

Nodes

Node 2: 5th Column

Loading signal...

{ "id": "3c1ecb65-b966-40a0-b88b-163b1e23e333", "url": "https://archive.is/RV4B9", "source": "extension", "status": "approved", "category": "Military & Paramilitary Operations", "subcategory": "Unconventional / Paramilitary", "incident_type": "Proxy forces, militias, mercenaries (e.g. Wagner-type groups)", "country": "United Kingdom", "source_reliability": "B", "info_credibility": "3", "tags": [ "Russian hybrid warfare", "Wagner Group", "arson attack", "UK security", "Telegram recruitment", "proxy forces", "cryptocurrency payments", "NATO hybrid taskforce", "Russian sabotage", "Leyton" ], "nodes": [ "Node 2: 5th Column" ], "countries": [], "where_text": "Land", "headline": "UK Convicts British Men for Russian Wagner Group-Backed Arson Plot, Highlighting Growing Hybrid Threats", "description": "A NATO hybrid warfare taskforce working with UK security services is investigating a series of suspected Russian sabotage attacks on UK soil, including an arson attack on a London warehouse delivering humanitarian aid to Ukraine. Three men from south London—Nii Kojo Mensah, Jakeem Rose, and Ugnius Asmena—were found guilty of plots orchestrated by the Russian mercenary Wagner Group to destabilize and cause fear. The group recruited low-level criminals via Telegram channels, paying in cryptocurrency to carry out acts ranging from photography of military shipments to arson. UK intelligence sources and NATO officials warn these acts are coordinated hybrid attacks aiming to erode trust in governments and portray them as weak. Lithuania and Poland have similarly developed counter-sabotage efforts in response, with concerns about the disposable and easily recruited nature of operatives. UK officials, including MI5 and the Met’s counterterrorism command, emphasize the Kremlin’s sustained mission to sow chaos using proxy criminals. The UK government vows full legal consequences for those acting on Russia’s behalf.", "summary_short": "Three British men were convicted in March 2024 for an arson plot orchestrated by Russia's Wagner Group targeting a London warehouse supplying aid to Ukraine, part of wider Russian hybrid sabotage threats in Europe.", "summary_extended": "In March 2024, three men from south London—Nii Kojo Mensah, Jakeem Rose, and Ugnius Asmena—were found guilty of aggravated arson at a warehouse in Leyton, east London, destroying about £100,000 worth of humanitarian aid bound for Ukraine. This attack was linked to the Russian mercenary group Wagner, which recruited the operatives via Telegram propaganda channels targeting vulnerable British criminals. The plot was part of a broader wave of Russian hybrid warfare tactics including arson, sabotage of undersea cables, cyber hacks, and drone incursions against NATO members, investigated by a NATO hybrid warfare taskforce working with UK security services. NATO officials highlight the difficulty in countering such proxies who operate through covert recruitment, often paid in untraceable cryptocurrency. Lithuania and Poland have established dedicated units to combat similar Russian sabotage efforts. UK intelligence and security agencies see these disposable recruits as part of a Kremlin strategy to create chaos and erode public trust in western governments. Security minister Dan Jarvis stated the UK criminal justice system will act firmly against those working on behalf of Russia. These developments underscore the increasing focus on hybrid threats beyond traditional military confrontations.", "actor_primary": "Wagner Group", "target_primary": null, "location_text": "Leyton, East London", "location_region": "London", "location_coordinates_lat": null, "location_coordinates_lon": null, "location_precision": "Approximate", "is_aggressor_signal": true, "signal_type": "DEFENSE_PREP_SIGNAL", "is_hybrid_war_signal": true, "classification_complete": true, "hybrid_signal_complete": true, "classification_confidence": "High", "classification_rationale": "The article clearly details Russian hybrid warfare aggression via proxy forces conducting sabotage on UK soil, alongside NATO and UK authorities actively investigating, countering, and preparing defenses against these attacks. Both aggressor and defense preparation signals are explicit with credible named actors and events.", "event_time_utc": "2024-03-26T00:00:00.000Z", "end_time_utc": null, "event_time_confidence": "unknown", "created_at": "2026-02-14T12:22:50.497Z", "updated_at": "2026-11-04T08:35:32.139Z", "reliability_band": "strong", "location_precision_band": "approximate", "time_precision_band": "unknown", "severity_band": "moderate", "attribution_confidence_band": "high", "attribution_basis": "single_source" }