Loading signal...
Signal
Submitted
Apr 28, 2026, 13:45 UTC
Since the Ukraine war began, Europe has expelled over 400 Russian diplomats suspected as spies, prompting Moscow to adjust its espionage methods including increasing cyberattacks and deploying traveling agents.
Since Russia's invasion of Ukraine, more than 400 Russian diplomats, believed to be undercover intelligence officers, have been expelled from Europe. In Germany alone, 40 diplomats accredited to the Russian embassy and consulates were declared persona non grata, with families also forced to leave. German Foreign Minister Annalena Baerbock stated these individuals had not performed diplomatic duties and had systematically undermined freedom and societal cohesion. European security officials consider this a significant setback for Russian intelligence, expecting Moscow to shift tactics by increasing cyberattacks targeting energy policy, sanctions, and arms projects, as well as reviving Cold War-era espionage methods. One such method involves traveling spies operating under false identities for limited missions, exemplified by the 2018 Skripal poisoning in the UK. The article also notes a 2019 assassination of a Chechen exile in Berlin by a Russian agent, likely involving operatives without diplomatic cover. Experts warn Moscow may also revive the costly and risky 'illegal' espionage program whereby agents permanently inhabit a target country under deep cover without diplomatic immunity. Germany previously uncovered such agents, but authorities believe others remain undetected. Russian intelligence continues to use encrypted shortwave communications to direct these spies. The challenges posed by restricted travel and visa requirements are somewhat mitigated by Russia's covert logistical networks enabling clandestine travel within Europe.
Confidence: High
The article clearly describes hostile Russian espionage activities across Europe with concrete examples of expelled diplomats identified as spies, covert recruitment attempts, and assassination operations within Germany, indicating aggressive hybrid operations.
Source URL
https://tagesschau.de/investigativ/ndr-wdr/spione-russland-101.html
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "4e3fb740-90ee-41af-a025-8044e1c5bf6a",
"url": "https://tagesschau.de/investigativ/ndr-wdr/spione-russland-101.html",
"source": "extension",
"status": "approved",
"category": "Intelligence & Espionage",
"subcategory": "Human Intelligence (HUMINT)",
"incident_type": "Recruitment of locals",
"country": "Germany",
"source_reliability": "B",
"info_credibility": "3",
"tags": [
"russian intelligence operations",
"diplomatic expulsions",
"GRU",
"SWR",
"FSB",
"traveling agents",
"illegal spies",
"Berlin assassination",
"cyberattacks",
"russia–ukraine war",
"Germany",
"european union"
],
"nodes": [
"Node 1: Borders",
"Node 2: 5th Column"
],
"countries": [
"Germany"
],
"where_text": "Land",
"headline": "After Diplomatic Expulsions: Where Are Russia's Spies?",
"description": "Since the Ukraine war began in early 2022, over 400 Russian diplomats suspected as spies have been expelled from European countries, including 40 in Germany. These individuals are believed to have been active undercover intelligence officers from units such as the GRU and SWR, who systematically undermined democratic freedoms and social cohesion. Their expulsion is considered a significant blow to Russian intelligence operations in Europe. Security agencies expect Russia to shift its espionage tactics, increasing cyberattacks focused on strategic sectors like energy and sanctions and deploying more traveling agents with falsified identities for short-term missions. The article highlights a recorded recruitment attempt by the Russian military attaché in Slovakia and notes the 2019 assassination of a Chechen exile in Berlin by a Russian FSB-linked assassin acting covertly without diplomatic cover. Analysts predict Moscow may revive the Cold War 'illegal' spy programs that involve agents living long-term deep cover lives without diplomatic immunity, some of which were uncovered in Germany with agents communicating via encrypted shortwave radio. Travel restrictions and heightened western alertness complicate Russian spy operations, but covert networks remain to support such activities.",
"summary_short": "Since the Ukraine war began, Europe has expelled over 400 Russian diplomats suspected as spies, prompting Moscow to adjust its espionage methods including increasing cyberattacks and deploying traveling agents.",
"summary_extended": "Since Russia's invasion of Ukraine, more than 400 Russian diplomats, believed to be undercover intelligence officers, have been expelled from Europe. In Germany alone, 40 diplomats accredited to the Russian embassy and consulates were declared persona non grata, with families also forced to leave. German Foreign Minister Annalena Baerbock stated these individuals had not performed diplomatic duties and had systematically undermined freedom and societal cohesion. European security officials consider this a significant setback for Russian intelligence, expecting Moscow to shift tactics by increasing cyberattacks targeting energy policy, sanctions, and arms projects, as well as reviving Cold War-era espionage methods. One such method involves traveling spies operating under false identities for limited missions, exemplified by the 2018 Skripal poisoning in the UK. The article also notes a 2019 assassination of a Chechen exile in Berlin by a Russian agent, likely involving operatives without diplomatic cover. Experts warn Moscow may also revive the costly and risky 'illegal' espionage program whereby agents permanently inhabit a target country under deep cover without diplomatic immunity. Germany previously uncovered such agents, but authorities believe others remain undetected. Russian intelligence continues to use encrypted shortwave communications to direct these spies. The challenges posed by restricted travel and visa requirements are somewhat mitigated by Russia's covert logistical networks enabling clandestine travel within Europe.",
"actor_primary": "Russian intelligence services",
"target_primary": null,
"location_text": "Berlin",
"location_region": "Berlin",
"location_coordinates_lat": 52.52,
"location_coordinates_lon": 13.405,
"location_precision": "Approximate",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article clearly describes hostile Russian espionage activities across Europe with concrete examples of expelled diplomats identified as spies, covert recruitment attempts, and assassination operations within Germany, indicating aggressive hybrid operations.",
"event_time_utc": "2022-03-10T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "pm24h",
"created_at": "2026-04-28T13:45:00.758Z",
"updated_at": "2026-11-04T08:36:03.522Z",
"reliability_band": "strong",
"location_precision_band": "approximate",
"time_precision_band": "within_24h",
"severity_band": "significant",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
B
Info credibility
3
Event time
Mar 10, 2022, 00:00 UTC
Event time confidence
pm24h
Location
Berlin
Region
Berlin
Primary actor
Russian intelligence services
Country
Germany
Countries
Germany
Tags
russian intelligence operations, diplomatic expulsions, GRU, SWR, FSB, traveling agents, illegal spies, Berlin assassination, cyberattacks, russia–ukraine war, Germany, european union
Nodes
Node 1: Borders, Node 2: 5th Column
Signal
Submitted
Apr 28, 2026, 13:45 UTC
Since the Ukraine war began, Europe has expelled over 400 Russian diplomats suspected as spies, prompting Moscow to adjust its espionage methods including increasing cyberattacks and deploying traveling agents.
Since Russia's invasion of Ukraine, more than 400 Russian diplomats, believed to be undercover intelligence officers, have been expelled from Europe. In Germany alone, 40 diplomats accredited to the Russian embassy and consulates were declared persona non grata, with families also forced to leave. German Foreign Minister Annalena Baerbock stated these individuals had not performed diplomatic duties and had systematically undermined freedom and societal cohesion. European security officials consider this a significant setback for Russian intelligence, expecting Moscow to shift tactics by increasing cyberattacks targeting energy policy, sanctions, and arms projects, as well as reviving Cold War-era espionage methods. One such method involves traveling spies operating under false identities for limited missions, exemplified by the 2018 Skripal poisoning in the UK. The article also notes a 2019 assassination of a Chechen exile in Berlin by a Russian agent, likely involving operatives without diplomatic cover. Experts warn Moscow may also revive the costly and risky 'illegal' espionage program whereby agents permanently inhabit a target country under deep cover without diplomatic immunity. Germany previously uncovered such agents, but authorities believe others remain undetected. Russian intelligence continues to use encrypted shortwave communications to direct these spies. The challenges posed by restricted travel and visa requirements are somewhat mitigated by Russia's covert logistical networks enabling clandestine travel within Europe.
Confidence: High
The article clearly describes hostile Russian espionage activities across Europe with concrete examples of expelled diplomats identified as spies, covert recruitment attempts, and assassination operations within Germany, indicating aggressive hybrid operations.
Source URL
https://tagesschau.de/investigativ/ndr-wdr/spione-russland-101.html
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "4e3fb740-90ee-41af-a025-8044e1c5bf6a",
"url": "https://tagesschau.de/investigativ/ndr-wdr/spione-russland-101.html",
"source": "extension",
"status": "approved",
"category": "Intelligence & Espionage",
"subcategory": "Human Intelligence (HUMINT)",
"incident_type": "Recruitment of locals",
"country": "Germany",
"source_reliability": "B",
"info_credibility": "3",
"tags": [
"russian intelligence operations",
"diplomatic expulsions",
"GRU",
"SWR",
"FSB",
"traveling agents",
"illegal spies",
"Berlin assassination",
"cyberattacks",
"russia–ukraine war",
"Germany",
"european union"
],
"nodes": [
"Node 1: Borders",
"Node 2: 5th Column"
],
"countries": [
"Germany"
],
"where_text": "Land",
"headline": "After Diplomatic Expulsions: Where Are Russia's Spies?",
"description": "Since the Ukraine war began in early 2022, over 400 Russian diplomats suspected as spies have been expelled from European countries, including 40 in Germany. These individuals are believed to have been active undercover intelligence officers from units such as the GRU and SWR, who systematically undermined democratic freedoms and social cohesion. Their expulsion is considered a significant blow to Russian intelligence operations in Europe. Security agencies expect Russia to shift its espionage tactics, increasing cyberattacks focused on strategic sectors like energy and sanctions and deploying more traveling agents with falsified identities for short-term missions. The article highlights a recorded recruitment attempt by the Russian military attaché in Slovakia and notes the 2019 assassination of a Chechen exile in Berlin by a Russian FSB-linked assassin acting covertly without diplomatic cover. Analysts predict Moscow may revive the Cold War 'illegal' spy programs that involve agents living long-term deep cover lives without diplomatic immunity, some of which were uncovered in Germany with agents communicating via encrypted shortwave radio. Travel restrictions and heightened western alertness complicate Russian spy operations, but covert networks remain to support such activities.",
"summary_short": "Since the Ukraine war began, Europe has expelled over 400 Russian diplomats suspected as spies, prompting Moscow to adjust its espionage methods including increasing cyberattacks and deploying traveling agents.",
"summary_extended": "Since Russia's invasion of Ukraine, more than 400 Russian diplomats, believed to be undercover intelligence officers, have been expelled from Europe. In Germany alone, 40 diplomats accredited to the Russian embassy and consulates were declared persona non grata, with families also forced to leave. German Foreign Minister Annalena Baerbock stated these individuals had not performed diplomatic duties and had systematically undermined freedom and societal cohesion. European security officials consider this a significant setback for Russian intelligence, expecting Moscow to shift tactics by increasing cyberattacks targeting energy policy, sanctions, and arms projects, as well as reviving Cold War-era espionage methods. One such method involves traveling spies operating under false identities for limited missions, exemplified by the 2018 Skripal poisoning in the UK. The article also notes a 2019 assassination of a Chechen exile in Berlin by a Russian agent, likely involving operatives without diplomatic cover. Experts warn Moscow may also revive the costly and risky 'illegal' espionage program whereby agents permanently inhabit a target country under deep cover without diplomatic immunity. Germany previously uncovered such agents, but authorities believe others remain undetected. Russian intelligence continues to use encrypted shortwave communications to direct these spies. The challenges posed by restricted travel and visa requirements are somewhat mitigated by Russia's covert logistical networks enabling clandestine travel within Europe.",
"actor_primary": "Russian intelligence services",
"target_primary": null,
"location_text": "Berlin",
"location_region": "Berlin",
"location_coordinates_lat": 52.52,
"location_coordinates_lon": 13.405,
"location_precision": "Approximate",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article clearly describes hostile Russian espionage activities across Europe with concrete examples of expelled diplomats identified as spies, covert recruitment attempts, and assassination operations within Germany, indicating aggressive hybrid operations.",
"event_time_utc": "2022-03-10T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "pm24h",
"created_at": "2026-04-28T13:45:00.758Z",
"updated_at": "2026-11-04T08:36:03.522Z",
"reliability_band": "strong",
"location_precision_band": "approximate",
"time_precision_band": "within_24h",
"severity_band": "significant",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
B
Info credibility
3
Event time
Mar 10, 2022, 00:00 UTC
Event time confidence
pm24h
Location
Berlin
Region
Berlin
Primary actor
Russian intelligence services
Country
Germany
Countries
Germany
Tags
russian intelligence operations, diplomatic expulsions, GRU, SWR, FSB, traveling agents, illegal spies, Berlin assassination, cyberattacks, russia–ukraine war, Germany, european union
Nodes
Node 1: Borders, Node 2: 5th Column