Loading signal...
Signal
Submitted
Feb 25, 2026, 12:25 UTC
Russian GRU intensifies sabotage operations across Europe using criminals and teenagers, including bombings and arson at cargo hubs in Lithuania, Poland, and Germany. Central figure Oleksiy Kolosovsky linked to coordinated attacks and Russian security service involvement.
Russian military intelligence (GRU) has increasingly engaged criminal networks and adolescents in sabotage missions throughout Europe, involving arson, bombings, and booby-trapped cargo transport. Investigations identify Oleksiy Kolosovsky, a 42-year-old former taxi driver from Krasnodar, as central organizer responsible for delivering explosives and recruiting operatives. He notably recruited Ukrainian teen Daniil Bardovsky, who placed an incendiary device at an IKEA store in Vilnius in May 2024. The sabotage campaign intensified during July 2024 with multiple incendiary devices discovered in Poland and a fire at a DHL facility in Leipzig. These attacks prompted briefings to top U.S. officials including the National Security Advisor and CIA Director. Kolosovsky is linked to the Killnet hacker group and was arrested by the Russian FSB, revealing further information about Russian security service complicity. Lithuania has prosecuted over a dozen suspects connected to Kolosovsky’s network. The campaign heightens European security concerns and diplomacy amid Russia’s ongoing hybrid warfare efforts targeting Western infrastructure.
Confidence: High
The article explicitly details hostile Russian GRU-led sabotage actions across Europe involving criminals and minors, including documented arrests and official briefings to Western intelligence agencies, clearly marking a Russian hybrid aggression event.
Source URL
https://mezha.net/eng/bukvy/russian-gru-s-growing-sabotage-campaign-in-europe-involving-criminals-and-teenagers/
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "5fb75df1-0284-4537-805b-077da8c816e2",
"url": "https://mezha.net/eng/bukvy/russian-gru-s-growing-sabotage-campaign-in-europe-involving-criminals-and-teenagers/",
"source": "extension",
"status": "approved",
"category": "Military & Paramilitary Operations",
"subcategory": "Unconventional / Paramilitary",
"incident_type": "Proxy forces, militias, mercenaries (e.g. Wagner-type groups)",
"country": "Lithuania",
"source_reliability": "A",
"info_credibility": "2",
"tags": [
"Russian GRU",
"sabotage",
"criminal networks",
"teenagers",
"arson",
"bombings",
"Killnet",
"Oleksiy Kolosovsky",
"Daniil Bardovsky",
"European security",
"cargo sabotage",
"train station attacks",
"Lithuania prosecution",
"FSB arrest"
],
"nodes": [
"Node 1: Borders",
"Node 2: 5th Column"
],
"countries": [
"Lithuania",
"Poland",
"Germany",
"Russian Federation"
],
"where_text": "Land",
"headline": "Russian GRU's Growing Sabotage Campaign in Europe Involving Criminals and Teenagers",
"description": "The Russian military intelligence (GRU) is increasingly recruiting criminals and teenagers to conduct sabotage operations across Europe, including arson, bombings, and booby-trapping cargo aircraft. Central to several operations is Oleksiy Kolosovsky, a 42-year-old former taxi driver from Krasnodar who coordinates delivery of explosives and materials for attacks on train stations and cargo hubs. He also recruits operatives. One notable recruit was Ukrainian teenager Daniil Bardovsky, who planted an incendiary device on an IKEA store in Vilnius in May 2024. The sabotage campaign escalated in July 2024 with multiple fires and bomb discoveries at transportation hubs in Poland and Leipzig, Germany. The US National Security Advisor and CIA Director were briefed about Kolosovsky’s network, which is linked to Killnet hackers. After his arrest by Russian FSB, Kolosovsky reportedly revealed details about Russian security services’ involvement. Lithuania has prosecuted over a dozen people linked to Kolosovsky. This campaign has alarmed Western security agencies and increased diplomatic tensions.",
"summary_short": "Russian GRU intensifies sabotage operations across Europe using criminals and teenagers, including bombings and arson at cargo hubs in Lithuania, Poland, and Germany. Central figure Oleksiy Kolosovsky linked to coordinated attacks and Russian security service involvement.",
"summary_extended": "Russian military intelligence (GRU) has increasingly engaged criminal networks and adolescents in sabotage missions throughout Europe, involving arson, bombings, and booby-trapped cargo transport. Investigations identify Oleksiy Kolosovsky, a 42-year-old former taxi driver from Krasnodar, as central organizer responsible for delivering explosives and recruiting operatives. He notably recruited Ukrainian teen Daniil Bardovsky, who placed an incendiary device at an IKEA store in Vilnius in May 2024. The sabotage campaign intensified during July 2024 with multiple incendiary devices discovered in Poland and a fire at a DHL facility in Leipzig. These attacks prompted briefings to top U.S. officials including the National Security Advisor and CIA Director. Kolosovsky is linked to the Killnet hacker group and was arrested by the Russian FSB, revealing further information about Russian security service complicity. Lithuania has prosecuted over a dozen suspects connected to Kolosovsky’s network. The campaign heightens European security concerns and diplomacy amid Russia’s ongoing hybrid warfare efforts targeting Western infrastructure.",
"actor_primary": "Oleksiy Kolosovsky",
"target_primary": null,
"location_text": "Vilnius, Lithuania; Poland; Leipzig, Germany; Krasnodar, Russia",
"location_region": null,
"location_coordinates_lat": 55.169438,
"location_coordinates_lon": 23.881275,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article explicitly details hostile Russian GRU-led sabotage actions across Europe involving criminals and minors, including documented arrests and official briefings to Western intelligence agencies, clearly marking a Russian hybrid aggression event.",
"event_time_utc": "2024-05-09T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "pm24h",
"created_at": "2026-02-25T12:25:00.027Z",
"updated_at": "2026-11-08T19:46:12.989Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "within_24h",
"severity_band": "significant",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
A
Info credibility
2
Event time
May 9, 2024, 00:00 UTC
Event time confidence
pm24h
Location
Vilnius, Lithuania; Poland; Leipzig, Germany; Krasnodar, Russia
Primary actor
Oleksiy Kolosovsky
Country
Lithuania
Countries
Lithuania, Poland, Germany, Russian Federation
Tags
Russian GRU, sabotage, criminal networks, teenagers, arson, bombings, Killnet, Oleksiy Kolosovsky, Daniil Bardovsky, European security, cargo sabotage, train station attacks, Lithuania prosecution, FSB arrest
Nodes
Node 1: Borders, Node 2: 5th Column
Signal
Submitted
Feb 25, 2026, 12:25 UTC
Russian GRU intensifies sabotage operations across Europe using criminals and teenagers, including bombings and arson at cargo hubs in Lithuania, Poland, and Germany. Central figure Oleksiy Kolosovsky linked to coordinated attacks and Russian security service involvement.
Russian military intelligence (GRU) has increasingly engaged criminal networks and adolescents in sabotage missions throughout Europe, involving arson, bombings, and booby-trapped cargo transport. Investigations identify Oleksiy Kolosovsky, a 42-year-old former taxi driver from Krasnodar, as central organizer responsible for delivering explosives and recruiting operatives. He notably recruited Ukrainian teen Daniil Bardovsky, who placed an incendiary device at an IKEA store in Vilnius in May 2024. The sabotage campaign intensified during July 2024 with multiple incendiary devices discovered in Poland and a fire at a DHL facility in Leipzig. These attacks prompted briefings to top U.S. officials including the National Security Advisor and CIA Director. Kolosovsky is linked to the Killnet hacker group and was arrested by the Russian FSB, revealing further information about Russian security service complicity. Lithuania has prosecuted over a dozen suspects connected to Kolosovsky’s network. The campaign heightens European security concerns and diplomacy amid Russia’s ongoing hybrid warfare efforts targeting Western infrastructure.
Confidence: High
The article explicitly details hostile Russian GRU-led sabotage actions across Europe involving criminals and minors, including documented arrests and official briefings to Western intelligence agencies, clearly marking a Russian hybrid aggression event.
Source URL
https://mezha.net/eng/bukvy/russian-gru-s-growing-sabotage-campaign-in-europe-involving-criminals-and-teenagers/
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "5fb75df1-0284-4537-805b-077da8c816e2",
"url": "https://mezha.net/eng/bukvy/russian-gru-s-growing-sabotage-campaign-in-europe-involving-criminals-and-teenagers/",
"source": "extension",
"status": "approved",
"category": "Military & Paramilitary Operations",
"subcategory": "Unconventional / Paramilitary",
"incident_type": "Proxy forces, militias, mercenaries (e.g. Wagner-type groups)",
"country": "Lithuania",
"source_reliability": "A",
"info_credibility": "2",
"tags": [
"Russian GRU",
"sabotage",
"criminal networks",
"teenagers",
"arson",
"bombings",
"Killnet",
"Oleksiy Kolosovsky",
"Daniil Bardovsky",
"European security",
"cargo sabotage",
"train station attacks",
"Lithuania prosecution",
"FSB arrest"
],
"nodes": [
"Node 1: Borders",
"Node 2: 5th Column"
],
"countries": [
"Lithuania",
"Poland",
"Germany",
"Russian Federation"
],
"where_text": "Land",
"headline": "Russian GRU's Growing Sabotage Campaign in Europe Involving Criminals and Teenagers",
"description": "The Russian military intelligence (GRU) is increasingly recruiting criminals and teenagers to conduct sabotage operations across Europe, including arson, bombings, and booby-trapping cargo aircraft. Central to several operations is Oleksiy Kolosovsky, a 42-year-old former taxi driver from Krasnodar who coordinates delivery of explosives and materials for attacks on train stations and cargo hubs. He also recruits operatives. One notable recruit was Ukrainian teenager Daniil Bardovsky, who planted an incendiary device on an IKEA store in Vilnius in May 2024. The sabotage campaign escalated in July 2024 with multiple fires and bomb discoveries at transportation hubs in Poland and Leipzig, Germany. The US National Security Advisor and CIA Director were briefed about Kolosovsky’s network, which is linked to Killnet hackers. After his arrest by Russian FSB, Kolosovsky reportedly revealed details about Russian security services’ involvement. Lithuania has prosecuted over a dozen people linked to Kolosovsky. This campaign has alarmed Western security agencies and increased diplomatic tensions.",
"summary_short": "Russian GRU intensifies sabotage operations across Europe using criminals and teenagers, including bombings and arson at cargo hubs in Lithuania, Poland, and Germany. Central figure Oleksiy Kolosovsky linked to coordinated attacks and Russian security service involvement.",
"summary_extended": "Russian military intelligence (GRU) has increasingly engaged criminal networks and adolescents in sabotage missions throughout Europe, involving arson, bombings, and booby-trapped cargo transport. Investigations identify Oleksiy Kolosovsky, a 42-year-old former taxi driver from Krasnodar, as central organizer responsible for delivering explosives and recruiting operatives. He notably recruited Ukrainian teen Daniil Bardovsky, who placed an incendiary device at an IKEA store in Vilnius in May 2024. The sabotage campaign intensified during July 2024 with multiple incendiary devices discovered in Poland and a fire at a DHL facility in Leipzig. These attacks prompted briefings to top U.S. officials including the National Security Advisor and CIA Director. Kolosovsky is linked to the Killnet hacker group and was arrested by the Russian FSB, revealing further information about Russian security service complicity. Lithuania has prosecuted over a dozen suspects connected to Kolosovsky’s network. The campaign heightens European security concerns and diplomacy amid Russia’s ongoing hybrid warfare efforts targeting Western infrastructure.",
"actor_primary": "Oleksiy Kolosovsky",
"target_primary": null,
"location_text": "Vilnius, Lithuania; Poland; Leipzig, Germany; Krasnodar, Russia",
"location_region": null,
"location_coordinates_lat": 55.169438,
"location_coordinates_lon": 23.881275,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article explicitly details hostile Russian GRU-led sabotage actions across Europe involving criminals and minors, including documented arrests and official briefings to Western intelligence agencies, clearly marking a Russian hybrid aggression event.",
"event_time_utc": "2024-05-09T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "pm24h",
"created_at": "2026-02-25T12:25:00.027Z",
"updated_at": "2026-11-08T19:46:12.989Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "within_24h",
"severity_band": "significant",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
A
Info credibility
2
Event time
May 9, 2024, 00:00 UTC
Event time confidence
pm24h
Location
Vilnius, Lithuania; Poland; Leipzig, Germany; Krasnodar, Russia
Primary actor
Oleksiy Kolosovsky
Country
Lithuania
Countries
Lithuania, Poland, Germany, Russian Federation
Tags
Russian GRU, sabotage, criminal networks, teenagers, arson, bombings, Killnet, Oleksiy Kolosovsky, Daniil Bardovsky, European security, cargo sabotage, train station attacks, Lithuania prosecution, FSB arrest
Nodes
Node 1: Borders, Node 2: 5th Column