Signal
Submitted
Feb 1, 2026, 00:14 UTC
Lithuania charges 15 people linked to a Russia-backed network responsible for detonating incendiary parcels across Europe in 2024.
In July 2024, a Russia-backed network allegedly orchestrated arson attacks across Europe by sending homemade explosive devices hidden in massage pillows and cosmetic tubes via courier services DHL and DPD. Four parcels sent on 19 July 2024 detonated or caught fire in the UK (Birmingham), Germany (Leipzig), and Poland. Lithuanian prosecutors revealed ties between suspects and the Russian GRU military intelligence. Fifteen individuals from Russia, Lithuania, Latvia, Estonia, and Ukraine have been charged, with international arrest warrants for three others. Over 30 police searches in Lithuania, Poland, Latvia, and Estonia uncovered six kilograms of explosives. Some suspects are also connected to a 2024 arson attack on an Ikea store in Vilnius. Lithuanian authorities believe the parcel detonations were a test for targeting cargo planes bound for North America.
Confidence: High
The article provides a clear, verified description of a hostile Russia-backed terror network planting explosive devices across Europe, with explicit attribution to the Russian military intelligence service and description of violent attacks.
Source URL
https://euronews.com/2025/09/18/russia-backed-network-behind-detonating-parcels-in-europe-lithuania-says
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "414df08a-7f14-4e79-ae4b-87dd6e5ae3f1",
"url": "https://euronews.com/2025/09/18/russia-backed-network-behind-detonating-parcels-in-europe-lithuania-says",
"source": "extension",
"status": "approved",
"category": "Terrorism & Criminal Proxy Tactics",
"subcategory": "Terrorism",
"incident_type": "Bomb threats, assassination plots, targeted killings",
"country": "Lithuania",
"source_reliability": "C",
"info_credibility": "3",
"tags": [
"Russia",
"GRU",
"terrorism",
"parcel bombs",
"european union",
"Lithuania",
"UK",
"Germany",
"Poland",
"arson",
"courier services",
"DHL",
"DPD",
"explosives",
"intelligence",
"cross-border terrorism"
],
"nodes": [],
"countries": [],
"where_text": "Land",
"headline": null,
"description": "Fifteen people have been charged for a Russia-backed operation planning arson attacks via courier parcels in Europe. Investigations link suspects to the Russian GRU intelligence service. Explosive devices containing thermite were hidden inside massage pillows and cosmetic tubes, detonating or combusting in the UK, Germany, and Poland. Four incendiary parcels sent on 19 July 2024 were transported by DHL and DPD; one exploded in a UK warehouse, another caught fire at a German logistics center, and one combusted in a truck in Poland. Over 30 searches across four countries seized six kilograms of explosives. The network's suspects include citizens from Russia, Lithuania, Latvia, Estonia, and Ukraine. Some are also linked to a 2024 arson attack on an Ikea store in Vilnius. Lithuanian authorities suggest these attacks tested a Russian plot to target North America cargo flights.",
"summary_short": "Lithuania charges 15 people linked to a Russia-backed network responsible for detonating incendiary parcels across Europe in 2024.",
"summary_extended": "In July 2024, a Russia-backed network allegedly orchestrated arson attacks across Europe by sending homemade explosive devices hidden in massage pillows and cosmetic tubes via courier services DHL and DPD. Four parcels sent on 19 July 2024 detonated or caught fire in the UK (Birmingham), Germany (Leipzig), and Poland. Lithuanian prosecutors revealed ties between suspects and the Russian GRU military intelligence. Fifteen individuals from Russia, Lithuania, Latvia, Estonia, and Ukraine have been charged, with international arrest warrants for three others. Over 30 police searches in Lithuania, Poland, Latvia, and Estonia uncovered six kilograms of explosives. Some suspects are also connected to a 2024 arson attack on an Ikea store in Vilnius. Lithuanian authorities believe the parcel detonations were a test for targeting cargo planes bound for North America.",
"actor_primary": "Russian GRU",
"target_primary": null,
"location_text": "Europe (UK, Germany, Poland, Lithuania, Latvia, Estonia)",
"location_region": null,
"location_coordinates_lat": 55.169438,
"location_coordinates_lon": 23.881275,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article provides a clear, verified description of a hostile Russia-backed terror network planting explosive devices across Europe, with explicit attribution to the Russian military intelligence service and description of violent attacks.",
"event_time_utc": "2024-07-19T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "unknown",
"created_at": "2026-02-01T00:14:30.836Z",
"updated_at": "2026-11-04T08:35:32.139Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "unknown",
"severity_band": "moderate",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
C
Info credibility
3
Event time
Jul 19, 2024, 00:00 UTC
Event time confidence
unknown
Location
Europe (UK, Germany, Poland, Lithuania, Latvia, Estonia)
Primary actor
Russian GRU
Country
Lithuania
Tags
Russia, GRU, terrorism, parcel bombs, european union, Lithuania, UK, Germany, Poland, arson, courier services, DHL, DPD, explosives, intelligence, cross-border terrorism
Signal
Submitted
Feb 1, 2026, 00:14 UTC
Lithuania charges 15 people linked to a Russia-backed network responsible for detonating incendiary parcels across Europe in 2024.
In July 2024, a Russia-backed network allegedly orchestrated arson attacks across Europe by sending homemade explosive devices hidden in massage pillows and cosmetic tubes via courier services DHL and DPD. Four parcels sent on 19 July 2024 detonated or caught fire in the UK (Birmingham), Germany (Leipzig), and Poland. Lithuanian prosecutors revealed ties between suspects and the Russian GRU military intelligence. Fifteen individuals from Russia, Lithuania, Latvia, Estonia, and Ukraine have been charged, with international arrest warrants for three others. Over 30 police searches in Lithuania, Poland, Latvia, and Estonia uncovered six kilograms of explosives. Some suspects are also connected to a 2024 arson attack on an Ikea store in Vilnius. Lithuanian authorities believe the parcel detonations were a test for targeting cargo planes bound for North America.
Confidence: High
The article provides a clear, verified description of a hostile Russia-backed terror network planting explosive devices across Europe, with explicit attribution to the Russian military intelligence service and description of violent attacks.
Source URL
https://euronews.com/2025/09/18/russia-backed-network-behind-detonating-parcels-in-europe-lithuania-says
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "414df08a-7f14-4e79-ae4b-87dd6e5ae3f1",
"url": "https://euronews.com/2025/09/18/russia-backed-network-behind-detonating-parcels-in-europe-lithuania-says",
"source": "extension",
"status": "approved",
"category": "Terrorism & Criminal Proxy Tactics",
"subcategory": "Terrorism",
"incident_type": "Bomb threats, assassination plots, targeted killings",
"country": "Lithuania",
"source_reliability": "C",
"info_credibility": "3",
"tags": [
"Russia",
"GRU",
"terrorism",
"parcel bombs",
"european union",
"Lithuania",
"UK",
"Germany",
"Poland",
"arson",
"courier services",
"DHL",
"DPD",
"explosives",
"intelligence",
"cross-border terrorism"
],
"nodes": [],
"countries": [],
"where_text": "Land",
"headline": null,
"description": "Fifteen people have been charged for a Russia-backed operation planning arson attacks via courier parcels in Europe. Investigations link suspects to the Russian GRU intelligence service. Explosive devices containing thermite were hidden inside massage pillows and cosmetic tubes, detonating or combusting in the UK, Germany, and Poland. Four incendiary parcels sent on 19 July 2024 were transported by DHL and DPD; one exploded in a UK warehouse, another caught fire at a German logistics center, and one combusted in a truck in Poland. Over 30 searches across four countries seized six kilograms of explosives. The network's suspects include citizens from Russia, Lithuania, Latvia, Estonia, and Ukraine. Some are also linked to a 2024 arson attack on an Ikea store in Vilnius. Lithuanian authorities suggest these attacks tested a Russian plot to target North America cargo flights.",
"summary_short": "Lithuania charges 15 people linked to a Russia-backed network responsible for detonating incendiary parcels across Europe in 2024.",
"summary_extended": "In July 2024, a Russia-backed network allegedly orchestrated arson attacks across Europe by sending homemade explosive devices hidden in massage pillows and cosmetic tubes via courier services DHL and DPD. Four parcels sent on 19 July 2024 detonated or caught fire in the UK (Birmingham), Germany (Leipzig), and Poland. Lithuanian prosecutors revealed ties between suspects and the Russian GRU military intelligence. Fifteen individuals from Russia, Lithuania, Latvia, Estonia, and Ukraine have been charged, with international arrest warrants for three others. Over 30 police searches in Lithuania, Poland, Latvia, and Estonia uncovered six kilograms of explosives. Some suspects are also connected to a 2024 arson attack on an Ikea store in Vilnius. Lithuanian authorities believe the parcel detonations were a test for targeting cargo planes bound for North America.",
"actor_primary": "Russian GRU",
"target_primary": null,
"location_text": "Europe (UK, Germany, Poland, Lithuania, Latvia, Estonia)",
"location_region": null,
"location_coordinates_lat": 55.169438,
"location_coordinates_lon": 23.881275,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article provides a clear, verified description of a hostile Russia-backed terror network planting explosive devices across Europe, with explicit attribution to the Russian military intelligence service and description of violent attacks.",
"event_time_utc": "2024-07-19T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "unknown",
"created_at": "2026-02-01T00:14:30.836Z",
"updated_at": "2026-11-04T08:35:32.139Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "unknown",
"severity_band": "moderate",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
C
Info credibility
3
Event time
Jul 19, 2024, 00:00 UTC
Event time confidence
unknown
Location
Europe (UK, Germany, Poland, Lithuania, Latvia, Estonia)
Primary actor
Russian GRU
Country
Lithuania
Tags
Russia, GRU, terrorism, parcel bombs, european union, Lithuania, UK, Germany, Poland, arson, courier services, DHL, DPD, explosives, intelligence, cross-border terrorism