Russia has adopted a method termed Sabotage-as-a-Service, recruiting immigrants and petty criminals via Telegram to conduct simple sabotage tasks such as hanging posters, setting fires to telecom boxes, cutting cables, and taking photographs. This approach uses freelancers without loyalty or training, financially incentivized to perform destructive acts to create widespread fear and insecurity. In the first five months of 2025 alone, at least 25 publicly known sabotage and espionage acts targeted NATO-related infrastructure, with European railways identified as a critical target for disrupting military logistics. Additionally, Russian SIGINT operations continue from a longstanding facility in Vienna, intercepting satellite communications linked to Africa and Western military and diplomatic channels. The Olymp-K2 satellite conducts unusual proximity operations, which potentially enable monitoring and disruption of Western satellites via command-and-control signal interception, representing a coordinated two-layer espionage campaign. The Austrian domestic intelligence agency regards the Vienna SIGINT station as a significant security risk, though espionage prosecutions are limited by law to Austrian interests. Switzerland is preparing a national security strategy acknowledging potential intensified Russian hybrid warfare from 2028 amid evolving geopolitical dynamics and diminished reliance on US support. These developments illustrate multifaceted Russian hybrid warfare tactics encompassing sabotage outsourcing, SIGINT espionage, satellite operations, and information warfare intensified by emerging AI technologies.

Russia has adopted a method termed Sabotage-as-a-Service, recruiting immigrants and petty criminals via Telegram to conduct simple sabotage tasks such as hanging posters, setting fires to telecom boxes, cutting cables, and taking photographs. This approach uses freelancers without loyalty or training, financially incentivized to perform destructive acts to create widespread fear and insecurity. In the first five months of 2025 alone, at least 25 publicly known sabotage and espionage acts targeted NATO-related infrastructure, with European railways identified as a critical target for disrupting military logistics. Additionally, Russian SIGINT operations continue from a longstanding facility in Vienna, intercepting satellite communications linked to Africa and Western military and diplomatic channels. The Olymp-K2 satellite conducts unusual proximity operations, which potentially enable monitoring and disruption of Western satellites via command-and-control signal interception, representing a coordinated two-layer espionage campaign. The Austrian domestic intelligence agency regards the Vienna SIGINT station as a significant security risk, though espionage prosecutions are limited by law to Austrian interests. Switzerland is preparing a national security strategy acknowledging potential intensified Russian hybrid warfare from 2028 amid evolving geopolitical dynamics and diminished reliance on US support. These developments illustrate multifaceted Russian hybrid warfare tactics encompassing sabotage outsourcing, SIGINT espionage, satellite operations, and information warfare intensified by emerging AI technologies.