Loading signal...
Signal
Submitted
Mar 23, 2026, 15:50 UTC
Lithuanian intelligence reports that Russian and Belarusian-linked actors used Lithuania-registered companies BK Software, NTLab, and Kosminis Vytis to bypass sanctions and access Western technologies, leading to government restrictions on their operations.
On 6 March 2026, Lithuanian intelligence agencies disclosed that companies registered in Lithuania have facilitated sanctions evasion and technology acquisition by Russian and Belarusian-linked entities. BK Software, controlled by Russian citizen Elena Lupandina, cooperated with a sanctioned Hong Kong company supplying microelectronics for Russian Orlan drones, while NTLab and Kosminis Vytis, both headed by Belarusian citizens with familial ties managing the companies, were used as fronts to acquire sensitive dual-use technologies linked to Russian and Belarusian defense industries. Lithuanian authorities, citing national security risks, initiated reviews and barred these companies from operating in strategic high-tech sectors. The report reveals the broader pattern of sanctions evasion with nearly half of entities controlled by Belarusian nationals. The intelligence assessment underscores Russia’s continued military expansion as Lithuania’s primary security concern.
Confidence: High
The report explicitly documents Russian and Belarusian actors using Lithuania-registered companies to evade sanctions and access military-relevant technology (aggressor signal). Lithuanian authorities' actions to restrict these companies demonstrate alliance defense preparation to secure critical technologies and national security. Both aggressor and defense elements are clearly described with named actors and concrete actions.
Source URL
https://lrt.lt/en/news-in-english/19/2859160/intelligence-report-lithuania-registered-firms-used-to-bypass-sanctions-access-tech
Published as a Defense Preparations signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "82d57bac-6c7e-434b-8c5f-36b353007efb",
"url": "https://lrt.lt/en/news-in-english/19/2859160/intelligence-report-lithuania-registered-firms-used-to-bypass-sanctions-access-tech",
"source": "extension",
"status": "approved",
"category": "Intelligence & Espionage",
"subcategory": "Counterintelligence Sabotage",
"incident_type": "Targeting enemy agencies with infiltration",
"country": "Lithuania",
"source_reliability": "B",
"info_credibility": "3",
"tags": [
"sanctions",
"Russian-linked companies",
"Belarusian-linked companies",
"BK Software",
"NTLab",
"Kosminis Vytis",
"dual-use technology",
"national security threat",
"intelligence report",
"counterintelligence",
"Orlan drones",
"European Union sanctions"
],
"nodes": [
"Node 2: 5th Column"
],
"countries": [],
"where_text": "Land",
"headline": "Intelligence report: Lithuania-registered firms used to bypass sanctions, access tech",
"description": "The Lithuanian State Security Department and the Second Investigation Department under the Ministry of National Defence released a national security threat assessment revealing that Lithuania-registered companies have been used by Russian and Belarusian-linked actors to bypass international sanctions and access Western technologies. The report highlights three companies: BK Software, NTLab, and Kosminis Vytis, involved in facilitating sanctions evasion, with BK Software knowingly cooperating with a sanctioned Hong Kong supplier linked to Russia’s Orlan drones, and NTLab and Kosminis Vytis serving as covers for acquiring technologies for both civilian and military use tied to Russian and Belarusian defense sectors. Lithuanian authorities acted to restrict the operations of these companies due to national security concerns. The report states approximately 50% of sanctions evasion entities are controlled by Belarusians, 31% by Russians, and 19% by others. The intelligence warns that Russia's ongoing military expansion remains the primary security threat to Lithuania.",
"summary_short": "Lithuanian intelligence reports that Russian and Belarusian-linked actors used Lithuania-registered companies BK Software, NTLab, and Kosminis Vytis to bypass sanctions and access Western technologies, leading to government restrictions on their operations.",
"summary_extended": "On 6 March 2026, Lithuanian intelligence agencies disclosed that companies registered in Lithuania have facilitated sanctions evasion and technology acquisition by Russian and Belarusian-linked entities. BK Software, controlled by Russian citizen Elena Lupandina, cooperated with a sanctioned Hong Kong company supplying microelectronics for Russian Orlan drones, while NTLab and Kosminis Vytis, both headed by Belarusian citizens with familial ties managing the companies, were used as fronts to acquire sensitive dual-use technologies linked to Russian and Belarusian defense industries. Lithuanian authorities, citing national security risks, initiated reviews and barred these companies from operating in strategic high-tech sectors. The report reveals the broader pattern of sanctions evasion with nearly half of entities controlled by Belarusian nationals. The intelligence assessment underscores Russia’s continued military expansion as Lithuania’s primary security concern.",
"actor_primary": "BK Software",
"target_primary": null,
"location_text": "Vilnius",
"location_region": null,
"location_coordinates_lat": null,
"location_coordinates_lon": null,
"location_precision": "Approximate",
"is_aggressor_signal": true,
"signal_type": "DEFENSE_PREP_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The report explicitly documents Russian and Belarusian actors using Lithuania-registered companies to evade sanctions and access military-relevant technology (aggressor signal). Lithuanian authorities' actions to restrict these companies demonstrate alliance defense preparation to secure critical technologies and national security. Both aggressor and defense elements are clearly described with named actors and concrete actions.",
"event_time_utc": "2026-03-06T11:45:00.000Z",
"end_time_utc": null,
"event_time_confidence": "exact",
"created_at": "2026-03-23T15:50:02.069Z",
"updated_at": "2026-11-04T08:35:32.139Z",
"reliability_band": "strong",
"location_precision_band": "approximate",
"time_precision_band": "exact",
"severity_band": "moderate",
"attribution_confidence_band": "high",
"attribution_basis": "independent_sources"
}Source reliability
B
Info credibility
3
Event time
Mar 6, 2026, 11:45 UTC
Event time confidence
exact
Location
Vilnius
Primary actor
BK Software
Country
Lithuania
Tags
sanctions, Russian-linked companies, Belarusian-linked companies, BK Software, NTLab, Kosminis Vytis, dual-use technology, national security threat, intelligence report, counterintelligence, Orlan drones, European Union sanctions
Nodes
Node 2: 5th Column
Signal
Submitted
Mar 23, 2026, 15:50 UTC
Lithuanian intelligence reports that Russian and Belarusian-linked actors used Lithuania-registered companies BK Software, NTLab, and Kosminis Vytis to bypass sanctions and access Western technologies, leading to government restrictions on their operations.
On 6 March 2026, Lithuanian intelligence agencies disclosed that companies registered in Lithuania have facilitated sanctions evasion and technology acquisition by Russian and Belarusian-linked entities. BK Software, controlled by Russian citizen Elena Lupandina, cooperated with a sanctioned Hong Kong company supplying microelectronics for Russian Orlan drones, while NTLab and Kosminis Vytis, both headed by Belarusian citizens with familial ties managing the companies, were used as fronts to acquire sensitive dual-use technologies linked to Russian and Belarusian defense industries. Lithuanian authorities, citing national security risks, initiated reviews and barred these companies from operating in strategic high-tech sectors. The report reveals the broader pattern of sanctions evasion with nearly half of entities controlled by Belarusian nationals. The intelligence assessment underscores Russia’s continued military expansion as Lithuania’s primary security concern.
Confidence: High
The report explicitly documents Russian and Belarusian actors using Lithuania-registered companies to evade sanctions and access military-relevant technology (aggressor signal). Lithuanian authorities' actions to restrict these companies demonstrate alliance defense preparation to secure critical technologies and national security. Both aggressor and defense elements are clearly described with named actors and concrete actions.
Source URL
https://lrt.lt/en/news-in-english/19/2859160/intelligence-report-lithuania-registered-firms-used-to-bypass-sanctions-access-tech
Published as a Defense Preparations signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "82d57bac-6c7e-434b-8c5f-36b353007efb",
"url": "https://lrt.lt/en/news-in-english/19/2859160/intelligence-report-lithuania-registered-firms-used-to-bypass-sanctions-access-tech",
"source": "extension",
"status": "approved",
"category": "Intelligence & Espionage",
"subcategory": "Counterintelligence Sabotage",
"incident_type": "Targeting enemy agencies with infiltration",
"country": "Lithuania",
"source_reliability": "B",
"info_credibility": "3",
"tags": [
"sanctions",
"Russian-linked companies",
"Belarusian-linked companies",
"BK Software",
"NTLab",
"Kosminis Vytis",
"dual-use technology",
"national security threat",
"intelligence report",
"counterintelligence",
"Orlan drones",
"European Union sanctions"
],
"nodes": [
"Node 2: 5th Column"
],
"countries": [],
"where_text": "Land",
"headline": "Intelligence report: Lithuania-registered firms used to bypass sanctions, access tech",
"description": "The Lithuanian State Security Department and the Second Investigation Department under the Ministry of National Defence released a national security threat assessment revealing that Lithuania-registered companies have been used by Russian and Belarusian-linked actors to bypass international sanctions and access Western technologies. The report highlights three companies: BK Software, NTLab, and Kosminis Vytis, involved in facilitating sanctions evasion, with BK Software knowingly cooperating with a sanctioned Hong Kong supplier linked to Russia’s Orlan drones, and NTLab and Kosminis Vytis serving as covers for acquiring technologies for both civilian and military use tied to Russian and Belarusian defense sectors. Lithuanian authorities acted to restrict the operations of these companies due to national security concerns. The report states approximately 50% of sanctions evasion entities are controlled by Belarusians, 31% by Russians, and 19% by others. The intelligence warns that Russia's ongoing military expansion remains the primary security threat to Lithuania.",
"summary_short": "Lithuanian intelligence reports that Russian and Belarusian-linked actors used Lithuania-registered companies BK Software, NTLab, and Kosminis Vytis to bypass sanctions and access Western technologies, leading to government restrictions on their operations.",
"summary_extended": "On 6 March 2026, Lithuanian intelligence agencies disclosed that companies registered in Lithuania have facilitated sanctions evasion and technology acquisition by Russian and Belarusian-linked entities. BK Software, controlled by Russian citizen Elena Lupandina, cooperated with a sanctioned Hong Kong company supplying microelectronics for Russian Orlan drones, while NTLab and Kosminis Vytis, both headed by Belarusian citizens with familial ties managing the companies, were used as fronts to acquire sensitive dual-use technologies linked to Russian and Belarusian defense industries. Lithuanian authorities, citing national security risks, initiated reviews and barred these companies from operating in strategic high-tech sectors. The report reveals the broader pattern of sanctions evasion with nearly half of entities controlled by Belarusian nationals. The intelligence assessment underscores Russia’s continued military expansion as Lithuania’s primary security concern.",
"actor_primary": "BK Software",
"target_primary": null,
"location_text": "Vilnius",
"location_region": null,
"location_coordinates_lat": null,
"location_coordinates_lon": null,
"location_precision": "Approximate",
"is_aggressor_signal": true,
"signal_type": "DEFENSE_PREP_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The report explicitly documents Russian and Belarusian actors using Lithuania-registered companies to evade sanctions and access military-relevant technology (aggressor signal). Lithuanian authorities' actions to restrict these companies demonstrate alliance defense preparation to secure critical technologies and national security. Both aggressor and defense elements are clearly described with named actors and concrete actions.",
"event_time_utc": "2026-03-06T11:45:00.000Z",
"end_time_utc": null,
"event_time_confidence": "exact",
"created_at": "2026-03-23T15:50:02.069Z",
"updated_at": "2026-11-04T08:35:32.139Z",
"reliability_band": "strong",
"location_precision_band": "approximate",
"time_precision_band": "exact",
"severity_band": "moderate",
"attribution_confidence_band": "high",
"attribution_basis": "independent_sources"
}Source reliability
B
Info credibility
3
Event time
Mar 6, 2026, 11:45 UTC
Event time confidence
exact
Location
Vilnius
Primary actor
BK Software
Country
Lithuania
Tags
sanctions, Russian-linked companies, Belarusian-linked companies, BK Software, NTLab, Kosminis Vytis, dual-use technology, national security threat, intelligence report, counterintelligence, Orlan drones, European Union sanctions
Nodes
Node 2: 5th Column