European intelligence revealed that a Russian sabotage network planned bombings on planes flying from Europe to the US, with explosives sourced from Lithuania and attacks on DHL logistics centers in Poland, Germany, and UK disrupted.

Terrorism & Criminal Proxy TacticsTerrorismBomb threats, assassination plots, targeted killings

Aggressor

Summary

European intelligence uncovered a Russian sabotage operation preparing explosive attacks targeting passenger airplanes flying from Europe to the United States. According to the Financial Times, the explosives seized were sufficient to cause mid-air explosions, a level of attack unprecedented since 9/11. This operation is part of a larger Russian hybrid warfare campaign in Europe, evidenced by a series of sabotage incidents including bombings at DHL logistics centers in Poland, Germany, and the United Kingdom using magnesium-fuse parcels sent from Lithuania. At least 20 people in Lithuania and Poland have been accused in the case, while the organizer fled to Azerbaijan, with Russian intelligence agencies publicly supporting his release. Intelligence also indicates Russian agent activity targeting critical infrastructure such as bridges and railways, including a foiled bomb plot on the Warsaw–Lublin rail line. Other thwarted sabotage attempts include arson, dam destruction, and water supply interference. The Kremlin reportedly commands these operations remotely via messengers and cryptocurrencies, actively recruiting local Eastern European citizens and criminals. Analysts regard these incidents as components of a comprehensive Russian hybrid escalation campaign, with a pre-war phase reminiscent of Soviet-era tactics. The broader context aligns with NATO's 2023 assessment that Russia is preparing for potential war with Europe by 2029.

Classification

Confidence: High

The article details confirmed Russian hostile sabotage operations plotting bombings on transatlantic passenger planes, part of a broader hybrid warfare campaign in Europe, thus clearly representing aggressor activity without describing allied defense measures.

Source URL

https://militarnyi.com/uk/news/rosiyany-planuvaly-vybuhy-v-povitri-na-amerykanskyh-litakah

Open source

Provenance

Publisher: hwt_web_submit
Submitted: Feb 1, 2026, 00:14 UTC
Last updated: Nov 8, 2026, 21:59 UTC
Event time: Dec 9, 2025, 00:00 UTC

Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.

Raw record

{
  "id": "c47b5cde-ecbe-4800-b5de-f35f03dea0cd",
  "url": "https://militarnyi.com/uk/news/rosiyany-planuvaly-vybuhy-v-povitri-na-amerykanskyh-litakah",
  "source": "hwt_web_submit",
  "status": "approved",
  "category": "Terrorism & Criminal Proxy Tactics",
  "subcategory": "Terrorism",
  "incident_type": "Bomb threats, assassination plots, targeted killings",
  "country": "Poland",
  "source_reliability": "C",
  "info_credibility": "3",
  "tags": [
    "Russian hybrid warfare",
    "terrorism",
    "aviation security",
    "bomb threats",
    "logistics sabotage",
    "NATO",
    "european union",
    "Poland",
    "Lithuania",
    "united states of america",
    "cyber-enabled operations",
    "russian intelligence operations",
    "GRU",
    "FSB",
    "SVR"
  ],
  "nodes": [],
  "countries": [],
  "where_text": "Land",
  "headline": null,
  "description": "European intelligence agencies uncovered a Russian sabotage network preparing bomb attacks on airplanes flying to the United States from Europe. Financial Times reports the seized explosives were enough to cause mid-air explosions on passenger planes, marking a potential attack scale unseen since September 11, 2001. The sabotage is part of a broader hybrid warfare campaign by Russia across Europe, including recent bombings at DHL logistics centers in Poland, Germany, and the UK, with magnesium-fuse devices sent from Lithuania. Authorities in Lithuania and Poland have charged at least 20 individuals; the organizer escaped to Azerbaijan, with support calls for his release from Russian FSB, SVR, and GRU. Intelligence agencies also note Russian agent activities targeting European bridges and rail infrastructure, including a foiled bombing on the Warsaw–Lublin rail line. Other disrupted sabotage acts include arson, dam attacks, and water supply tampering. Moscow reportedly runs these operations remotely using messengers and cryptocurrency, recruiting locals and criminals in Eastern Europe. Experts compare the campaign to KGB-era methods and suggest Europe is in a pre-war phase. NATO's 2023 report warns of Russia preparing for war with Europe by 2029.",
  "summary_short": "European intelligence revealed that a Russian sabotage network planned bombings on planes flying from Europe to the US, with explosives sourced from Lithuania and attacks on DHL logistics centers in Poland, Germany, and UK disrupted.",
  "summary_extended": "European intelligence uncovered a Russian sabotage operation preparing explosive attacks targeting passenger airplanes flying from Europe to the United States. According to the Financial Times, the explosives seized were sufficient to cause mid-air explosions, a level of attack unprecedented since 9/11. This operation is part of a larger Russian hybrid warfare campaign in Europe, evidenced by a series of sabotage incidents including bombings at DHL logistics centers in Poland, Germany, and the United Kingdom using magnesium-fuse parcels sent from Lithuania. At least 20 people in Lithuania and Poland have been accused in the case, while the organizer fled to Azerbaijan, with Russian intelligence agencies publicly supporting his release. Intelligence also indicates Russian agent activity targeting critical infrastructure such as bridges and railways, including a foiled bomb plot on the Warsaw–Lublin rail line. Other thwarted sabotage attempts include arson, dam destruction, and water supply interference. The Kremlin reportedly commands these operations remotely via messengers and cryptocurrencies, actively recruiting local Eastern European citizens and criminals. Analysts regard these incidents as components of a comprehensive Russian hybrid escalation campaign, with a pre-war phase reminiscent of Soviet-era tactics. The broader context aligns with NATO's 2023 assessment that Russia is preparing for potential war with Europe by 2029.",
  "actor_primary": "Russian sabotage network",
  "target_primary": null,
  "location_text": "Warsaw–Lublin railway, DHL logistics centers in Poland, Germany, and United Kingdom; Lithuania as package origin",
  "location_region": null,
  "location_coordinates_lat": 51.919438,
  "location_coordinates_lon": 19.145136,
  "location_precision": "Regional",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The article details confirmed Russian hostile sabotage operations plotting bombings on transatlantic passenger planes, part of a broader hybrid warfare campaign in Europe, thus clearly representing aggressor activity without describing allied defense measures.",
  "event_time_utc": "2025-12-09T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "pm24h",
  "created_at": "2026-02-01T00:14:46.251Z",
  "updated_at": "2026-11-08T21:59:05.701Z",
  "reliability_band": "strong",
  "location_precision_band": "regional",
  "time_precision_band": "within_24h",
  "severity_band": "significant",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

Public assessmentReliability: StrongSeverity: SignificantAttribution: HighSingle sourceTime: Same dayLocation: Regional

Source reliability

Info credibility

Event time

Dec 9, 2025, 00:00 UTC

Event time confidence

pm24h

Location

Warsaw–Lublin railway, DHL logistics centers in Poland, Germany, and United Kingdom; Lithuania as package origin

Primary actor

Russian sabotage network

Country

Poland

Tags

Russian hybrid warfare, terrorism, aviation security, bomb threats, logistics sabotage, NATO, european union, Poland, Lithuania, united states of america, cyber-enabled operations, russian intelligence operations, GRU, FSB, SVR

Loading signal...

{ "id": "c47b5cde-ecbe-4800-b5de-f35f03dea0cd", "url": "https://militarnyi.com/uk/news/rosiyany-planuvaly-vybuhy-v-povitri-na-amerykanskyh-litakah", "source": "hwt_web_submit", "status": "approved", "category": "Terrorism & Criminal Proxy Tactics", "subcategory": "Terrorism", "incident_type": "Bomb threats, assassination plots, targeted killings", "country": "Poland", "source_reliability": "C", "info_credibility": "3", "tags": [ "Russian hybrid warfare", "terrorism", "aviation security", "bomb threats", "logistics sabotage", "NATO", "european union", "Poland", "Lithuania", "united states of america", "cyber-enabled operations", "russian intelligence operations", "GRU", "FSB", "SVR" ], "nodes": [], "countries": [], "where_text": "Land", "headline": null, "description": "European intelligence agencies uncovered a Russian sabotage network preparing bomb attacks on airplanes flying to the United States from Europe. Financial Times reports the seized explosives were enough to cause mid-air explosions on passenger planes, marking a potential attack scale unseen since September 11, 2001. The sabotage is part of a broader hybrid warfare campaign by Russia across Europe, including recent bombings at DHL logistics centers in Poland, Germany, and the UK, with magnesium-fuse devices sent from Lithuania. Authorities in Lithuania and Poland have charged at least 20 individuals; the organizer escaped to Azerbaijan, with support calls for his release from Russian FSB, SVR, and GRU. Intelligence agencies also note Russian agent activities targeting European bridges and rail infrastructure, including a foiled bombing on the Warsaw–Lublin rail line. Other disrupted sabotage acts include arson, dam attacks, and water supply tampering. Moscow reportedly runs these operations remotely using messengers and cryptocurrency, recruiting locals and criminals in Eastern Europe. Experts compare the campaign to KGB-era methods and suggest Europe is in a pre-war phase. NATO's 2023 report warns of Russia preparing for war with Europe by 2029.", "summary_short": "European intelligence revealed that a Russian sabotage network planned bombings on planes flying from Europe to the US, with explosives sourced from Lithuania and attacks on DHL logistics centers in Poland, Germany, and UK disrupted.", "summary_extended": "European intelligence uncovered a Russian sabotage operation preparing explosive attacks targeting passenger airplanes flying from Europe to the United States. According to the Financial Times, the explosives seized were sufficient to cause mid-air explosions, a level of attack unprecedented since 9/11. This operation is part of a larger Russian hybrid warfare campaign in Europe, evidenced by a series of sabotage incidents including bombings at DHL logistics centers in Poland, Germany, and the United Kingdom using magnesium-fuse parcels sent from Lithuania. At least 20 people in Lithuania and Poland have been accused in the case, while the organizer fled to Azerbaijan, with Russian intelligence agencies publicly supporting his release. Intelligence also indicates Russian agent activity targeting critical infrastructure such as bridges and railways, including a foiled bomb plot on the Warsaw–Lublin rail line. Other thwarted sabotage attempts include arson, dam destruction, and water supply interference. The Kremlin reportedly commands these operations remotely via messengers and cryptocurrencies, actively recruiting local Eastern European citizens and criminals. Analysts regard these incidents as components of a comprehensive Russian hybrid escalation campaign, with a pre-war phase reminiscent of Soviet-era tactics. The broader context aligns with NATO's 2023 assessment that Russia is preparing for potential war with Europe by 2029.", "actor_primary": "Russian sabotage network", "target_primary": null, "location_text": "Warsaw–Lublin railway, DHL logistics centers in Poland, Germany, and United Kingdom; Lithuania as package origin", "location_region": null, "location_coordinates_lat": 51.919438, "location_coordinates_lon": 19.145136, "location_precision": "Regional", "is_aggressor_signal": true, "signal_type": "HYBRID_SIGNAL", "is_hybrid_war_signal": true, "classification_complete": true, "hybrid_signal_complete": true, "classification_confidence": "High", "classification_rationale": "The article details confirmed Russian hostile sabotage operations plotting bombings on transatlantic passenger planes, part of a broader hybrid warfare campaign in Europe, thus clearly representing aggressor activity without describing allied defense measures.", "event_time_utc": "2025-12-09T00:00:00.000Z", "end_time_utc": null, "event_time_confidence": "pm24h", "created_at": "2026-02-01T00:14:46.251Z", "updated_at": "2026-11-08T21:59:05.701Z", "reliability_band": "strong", "location_precision_band": "regional", "time_precision_band": "within_24h", "severity_band": "significant", "attribution_confidence_band": "high", "attribution_basis": "single_source" }