Loading signal...
Signal
Submitted
Apr 28, 2026, 12:51 UTC
Ex-Wirecard manager Jan Marsalek directed a Russian-backed disinformation campaign in Berlin in May 2022 to undermine support for Ukraine, involving stickers and graffiti linking Ukrainian groups to extremism.
In May 2022, Jan Marsalek, a fugitive ex-Wirecard executive believed to be in Russia and acting as a Russian agent, orchestrated a disinformation campaign dubbed 'Operation Berlin' aimed at undermining support for Ukraine. Through mobile chats, Marsalek coordinated with his Bulgarian contact Orlin Roussev and others to deploy stickers and graffiti in Berlin bearing symbols associated with Ukrainian far-right groups like the Azov Battalion. The campaign targeted prominent Berlin locations including the Brandenburg Gate, the Jewish Museum, the Holocaust Memorial, and a Bundeswehr recruitment office, with additional plans to expand to other German cities and Vienna. Roussev and multiple accomplices were arrested and convicted in the UK for espionage and spying activities on behalf of Russia. The campaign sought to falsely portray Ukraine sympathizers as extremists to damage public perception. Despite claims of widespread sticker distribution, Berlin police confirmed only one reported incident involving vandalism on a Russian kindergarten linked to the conflict. Marsalek maintained communication with Russian handlers and expressed frustration that the media ignored the actions. This event exemplifies Russia's use of low-cost active measures in psychological and information warfare to destabilize Western support for Ukraine.
Confidence: High
The report clearly documents hostile Russian-directed disinformation activities coordinated by Jan Marsalek, involving espionage agents and targeting Germany with propaganda to undermine Ukraine support.
Source URL
https://tagesschau.de/investigativ/marsalek-wirecard-desinformation-ukraine-krieg-russland-100.html
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "64897b91-cd18-4c30-8d3b-1dcf6cb81068",
"url": "https://tagesschau.de/investigativ/marsalek-wirecard-desinformation-ukraine-krieg-russland-100.html",
"source": "extension",
"status": "approved",
"category": "Cyber & Information Warfare",
"subcategory": "Information Operations",
"incident_type": "Propaganda & disinformation campaigns",
"country": "Germany",
"source_reliability": "A",
"info_credibility": "3",
"tags": [
"disinformation",
"Russia",
"russia–ukraine war",
"Jan Marsalek",
"active measures",
"espionage",
"Berlin",
"hybrid warfare",
"graffiti",
"stickers",
"Azov Battalion",
"spy scandal"
],
"nodes": [],
"countries": [
"Germany"
],
"where_text": "Land",
"headline": "Jan Marsalek orchestrated 'Operation Berlin' Russian disinformation campaign targeting Ukraine support",
"description": "Jan Marsalek, former Wirecard executive and fugitive believed to be acting on behalf of Russian intelligence from Moscow, orchestrated a disinformation campaign in Berlin in May 2022 to undermine support for Ukraine. Chat messages viewed by German media reveal Marsalek directing Bulgarian associates, including Orlin Roussev, to produce and place stickers and graffiti falsely depicting Ukrainian supporters as right-wing extremists using symbols such as runes and the Azov Battalion logo. The campaign targeted symbolic sites like Brandenburg Gate, Holocaust Memorial, the Jewish Museum, and a Bundeswehr recruitment center. Around 4000 stickers were reportedly distributed in Berlin, with plans to expand to other German cities and Vienna. Roussev and multiple Bulgarian operatives were arrested and convicted in the UK for espionage on Russia's behalf. Berlin police confirmed only one related vandalism report involving a Russian kindergarten. Marsalek expressed surprise that the media did not report on the operation. This reflects a wider pattern of Russian active measures aimed at sowing discord and undermining Western unity on Ukraine.",
"summary_short": "Ex-Wirecard manager Jan Marsalek directed a Russian-backed disinformation campaign in Berlin in May 2022 to undermine support for Ukraine, involving stickers and graffiti linking Ukrainian groups to extremism.",
"summary_extended": "In May 2022, Jan Marsalek, a fugitive ex-Wirecard executive believed to be in Russia and acting as a Russian agent, orchestrated a disinformation campaign dubbed 'Operation Berlin' aimed at undermining support for Ukraine. Through mobile chats, Marsalek coordinated with his Bulgarian contact Orlin Roussev and others to deploy stickers and graffiti in Berlin bearing symbols associated with Ukrainian far-right groups like the Azov Battalion. The campaign targeted prominent Berlin locations including the Brandenburg Gate, the Jewish Museum, the Holocaust Memorial, and a Bundeswehr recruitment office, with additional plans to expand to other German cities and Vienna. Roussev and multiple accomplices were arrested and convicted in the UK for espionage and spying activities on behalf of Russia. The campaign sought to falsely portray Ukraine sympathizers as extremists to damage public perception. Despite claims of widespread sticker distribution, Berlin police confirmed only one reported incident involving vandalism on a Russian kindergarten linked to the conflict. Marsalek maintained communication with Russian handlers and expressed frustration that the media ignored the actions. This event exemplifies Russia's use of low-cost active measures in psychological and information warfare to destabilize Western support for Ukraine.",
"actor_primary": "Jan Marsalek",
"target_primary": null,
"location_text": "Berlin",
"location_region": "Berlin",
"location_coordinates_lat": 52.52,
"location_coordinates_lon": 13.405,
"location_precision": "Approximate",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The report clearly documents hostile Russian-directed disinformation activities coordinated by Jan Marsalek, involving espionage agents and targeting Germany with propaganda to undermine Ukraine support.",
"event_time_utc": "2022-05-01T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "pm24h",
"created_at": "2026-04-28T12:51:00.038Z",
"updated_at": "2026-11-04T08:36:03.522Z",
"reliability_band": "strong",
"location_precision_band": "approximate",
"time_precision_band": "within_24h",
"severity_band": "moderate",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
A
Info credibility
3
Event time
May 1, 2022, 00:00 UTC
Event time confidence
pm24h
Location
Berlin
Region
Berlin
Primary actor
Jan Marsalek
Country
Germany
Countries
Germany
Tags
disinformation, Russia, russia–ukraine war, Jan Marsalek, active measures, espionage, Berlin, hybrid warfare, graffiti, stickers, Azov Battalion, spy scandal
Signal
Submitted
Apr 28, 2026, 12:51 UTC
Ex-Wirecard manager Jan Marsalek directed a Russian-backed disinformation campaign in Berlin in May 2022 to undermine support for Ukraine, involving stickers and graffiti linking Ukrainian groups to extremism.
In May 2022, Jan Marsalek, a fugitive ex-Wirecard executive believed to be in Russia and acting as a Russian agent, orchestrated a disinformation campaign dubbed 'Operation Berlin' aimed at undermining support for Ukraine. Through mobile chats, Marsalek coordinated with his Bulgarian contact Orlin Roussev and others to deploy stickers and graffiti in Berlin bearing symbols associated with Ukrainian far-right groups like the Azov Battalion. The campaign targeted prominent Berlin locations including the Brandenburg Gate, the Jewish Museum, the Holocaust Memorial, and a Bundeswehr recruitment office, with additional plans to expand to other German cities and Vienna. Roussev and multiple accomplices were arrested and convicted in the UK for espionage and spying activities on behalf of Russia. The campaign sought to falsely portray Ukraine sympathizers as extremists to damage public perception. Despite claims of widespread sticker distribution, Berlin police confirmed only one reported incident involving vandalism on a Russian kindergarten linked to the conflict. Marsalek maintained communication with Russian handlers and expressed frustration that the media ignored the actions. This event exemplifies Russia's use of low-cost active measures in psychological and information warfare to destabilize Western support for Ukraine.
Confidence: High
The report clearly documents hostile Russian-directed disinformation activities coordinated by Jan Marsalek, involving espionage agents and targeting Germany with propaganda to undermine Ukraine support.
Source URL
https://tagesschau.de/investigativ/marsalek-wirecard-desinformation-ukraine-krieg-russland-100.html
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "64897b91-cd18-4c30-8d3b-1dcf6cb81068",
"url": "https://tagesschau.de/investigativ/marsalek-wirecard-desinformation-ukraine-krieg-russland-100.html",
"source": "extension",
"status": "approved",
"category": "Cyber & Information Warfare",
"subcategory": "Information Operations",
"incident_type": "Propaganda & disinformation campaigns",
"country": "Germany",
"source_reliability": "A",
"info_credibility": "3",
"tags": [
"disinformation",
"Russia",
"russia–ukraine war",
"Jan Marsalek",
"active measures",
"espionage",
"Berlin",
"hybrid warfare",
"graffiti",
"stickers",
"Azov Battalion",
"spy scandal"
],
"nodes": [],
"countries": [
"Germany"
],
"where_text": "Land",
"headline": "Jan Marsalek orchestrated 'Operation Berlin' Russian disinformation campaign targeting Ukraine support",
"description": "Jan Marsalek, former Wirecard executive and fugitive believed to be acting on behalf of Russian intelligence from Moscow, orchestrated a disinformation campaign in Berlin in May 2022 to undermine support for Ukraine. Chat messages viewed by German media reveal Marsalek directing Bulgarian associates, including Orlin Roussev, to produce and place stickers and graffiti falsely depicting Ukrainian supporters as right-wing extremists using symbols such as runes and the Azov Battalion logo. The campaign targeted symbolic sites like Brandenburg Gate, Holocaust Memorial, the Jewish Museum, and a Bundeswehr recruitment center. Around 4000 stickers were reportedly distributed in Berlin, with plans to expand to other German cities and Vienna. Roussev and multiple Bulgarian operatives were arrested and convicted in the UK for espionage on Russia's behalf. Berlin police confirmed only one related vandalism report involving a Russian kindergarten. Marsalek expressed surprise that the media did not report on the operation. This reflects a wider pattern of Russian active measures aimed at sowing discord and undermining Western unity on Ukraine.",
"summary_short": "Ex-Wirecard manager Jan Marsalek directed a Russian-backed disinformation campaign in Berlin in May 2022 to undermine support for Ukraine, involving stickers and graffiti linking Ukrainian groups to extremism.",
"summary_extended": "In May 2022, Jan Marsalek, a fugitive ex-Wirecard executive believed to be in Russia and acting as a Russian agent, orchestrated a disinformation campaign dubbed 'Operation Berlin' aimed at undermining support for Ukraine. Through mobile chats, Marsalek coordinated with his Bulgarian contact Orlin Roussev and others to deploy stickers and graffiti in Berlin bearing symbols associated with Ukrainian far-right groups like the Azov Battalion. The campaign targeted prominent Berlin locations including the Brandenburg Gate, the Jewish Museum, the Holocaust Memorial, and a Bundeswehr recruitment office, with additional plans to expand to other German cities and Vienna. Roussev and multiple accomplices were arrested and convicted in the UK for espionage and spying activities on behalf of Russia. The campaign sought to falsely portray Ukraine sympathizers as extremists to damage public perception. Despite claims of widespread sticker distribution, Berlin police confirmed only one reported incident involving vandalism on a Russian kindergarten linked to the conflict. Marsalek maintained communication with Russian handlers and expressed frustration that the media ignored the actions. This event exemplifies Russia's use of low-cost active measures in psychological and information warfare to destabilize Western support for Ukraine.",
"actor_primary": "Jan Marsalek",
"target_primary": null,
"location_text": "Berlin",
"location_region": "Berlin",
"location_coordinates_lat": 52.52,
"location_coordinates_lon": 13.405,
"location_precision": "Approximate",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The report clearly documents hostile Russian-directed disinformation activities coordinated by Jan Marsalek, involving espionage agents and targeting Germany with propaganda to undermine Ukraine support.",
"event_time_utc": "2022-05-01T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "pm24h",
"created_at": "2026-04-28T12:51:00.038Z",
"updated_at": "2026-11-04T08:36:03.522Z",
"reliability_band": "strong",
"location_precision_band": "approximate",
"time_precision_band": "within_24h",
"severity_band": "moderate",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
A
Info credibility
3
Event time
May 1, 2022, 00:00 UTC
Event time confidence
pm24h
Location
Berlin
Region
Berlin
Primary actor
Jan Marsalek
Country
Germany
Countries
Germany
Tags
disinformation, Russia, russia–ukraine war, Jan Marsalek, active measures, espionage, Berlin, hybrid warfare, graffiti, stickers, Azov Battalion, spy scandal