Loading signal...
Signal
Submitted
Apr 28, 2026, 14:51 UTC
Germany's Verfassungsschutz adapts to growing Russian hybrid threats including sabotage, espionage, and influence operations, foiling sabotage plots in 2025.
In 2025, Germany's domestic intelligence agency, the Federal Office for the Protection of the Constitution (BfV), led by Vice President Sinan Selen, is reshaping its mission to confront escalating Russian hybrid warfare activities on German soil. Russian tactics reported include the use of 'low-level' or disposable agents managed through messaging apps for sabotage, cyberattacks targeting critical and secondary infrastructure, and disinformation campaigns designed to undermine German democracy and foster insecurity. An example is the arrest in May 2025 of Vladyslav T. and associates for planning sabotage involving freight transport to Ukraine using GPS trackers. Further intelligence indicates Moscow aims to recruit and indoctrinate ethnic Russian youth and students in the West as long-term influence agents reminiscent of old KGB methods. Following mass expulsions of Russian diplomats suspected of espionage, Russia reduced embassy-based spying, pivoting to covert methods including leveraging migration and political influence. The BfV is increasing efforts to educate businesses to protect against espionage and cyber threats, boosting surveillance and defensive capabilities. The agency seeks to assert a clearer, more modern mandate focused on early threat detection and prevention of foreign interference, in a context of renewed emphasis on homeland defense in Germany post the Ukraine war onset.
Confidence: High
The article provides an explicit account by German intelligence officials about discrete and concrete Russian hybrid actions on German soil, including sabotage plots, low-level agent networks, cyberattacks, and influence operations.
Source URL
https://welt.de/politik/deutschland/article68b17035adc6ba5d53cb08ab/Zeitenwende-fuer-den-Verfassungsschutz.html
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "d825b2ab-60bf-4bad-8431-daee10f2caba",
"url": "https://welt.de/politik/deutschland/article68b17035adc6ba5d53cb08ab/Zeitenwende-fuer-den-Verfassungsschutz.html",
"source": "extension",
"status": "approved",
"category": "Intelligence & Espionage",
"subcategory": "Human Intelligence (HUMINT)",
"incident_type": "Recruitment of locals",
"country": "Germany",
"source_reliability": "A",
"info_credibility": "3",
"tags": [
"Russia",
"Germany",
"Federal Office for the Protection of the Constitution",
"Intelligence",
"Hybrid Warfare",
"Espionage",
"Sabotage",
"cyberattacks",
"APT28",
"GRU",
"low-level agents",
"Influence Operations",
"Migration",
"Recruitment",
"russia–ukraine war"
],
"nodes": [
"Node 1: Borders",
"Node 2: 5th Column"
],
"countries": [
"Germany"
],
"where_text": "Land",
"headline": "Germany's Federal Office for the Protection of the Constitution shifts focus to counter Russian hybrid threats",
"description": "The Federal Office for the Protection of the Constitution (Bundesamt für Verfassungsschutz, BfV) in Germany is undergoing a transformation in response to growing Russian hybrid threats. Sinan Selen, Vice President of the BfV, detailed how Russia operates in Germany employing low-level agents, cyberattacks, and sabotage. A plot involving GPS tracker packages sent to Ukraine, intended to precede sabotage of freight transport, was foiled with arrests in May 2025. The BfV has observed tactics including cyberattacks on infrastructure and influence operations targeting migrants and students of Russian descent to co-opt them as long-term agents. Russian intelligence activities shifted after over 750 Russian diplomats were expelled across Europe following the Ukraine conflict. The BfV is also actively warning German industry on espionage risks and enhancing countermeasures. Transformation efforts include modernizing the agency and setting clearer strategic priorities focused on early detection and defense against foreign threats, with emphasis on Russian hybrid warfare techniques.",
"summary_short": "Germany's Verfassungsschutz adapts to growing Russian hybrid threats including sabotage, espionage, and influence operations, foiling sabotage plots in 2025.",
"summary_extended": "In 2025, Germany's domestic intelligence agency, the Federal Office for the Protection of the Constitution (BfV), led by Vice President Sinan Selen, is reshaping its mission to confront escalating Russian hybrid warfare activities on German soil. Russian tactics reported include the use of 'low-level' or disposable agents managed through messaging apps for sabotage, cyberattacks targeting critical and secondary infrastructure, and disinformation campaigns designed to undermine German democracy and foster insecurity. An example is the arrest in May 2025 of Vladyslav T. and associates for planning sabotage involving freight transport to Ukraine using GPS trackers. Further intelligence indicates Moscow aims to recruit and indoctrinate ethnic Russian youth and students in the West as long-term influence agents reminiscent of old KGB methods. Following mass expulsions of Russian diplomats suspected of espionage, Russia reduced embassy-based spying, pivoting to covert methods including leveraging migration and political influence. The BfV is increasing efforts to educate businesses to protect against espionage and cyber threats, boosting surveillance and defensive capabilities. The agency seeks to assert a clearer, more modern mandate focused on early threat detection and prevention of foreign interference, in a context of renewed emphasis on homeland defense in Germany post the Ukraine war onset.",
"actor_primary": "Russian military intelligence group GRU",
"target_primary": null,
"location_text": "Cologne",
"location_region": "North Rhine-Westphalia",
"location_coordinates_lat": 51.165691,
"location_coordinates_lon": 10.451526,
"location_precision": "Approximate",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article provides an explicit account by German intelligence officials about discrete and concrete Russian hybrid actions on German soil, including sabotage plots, low-level agent networks, cyberattacks, and influence operations.",
"event_time_utc": "2025-08-30T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "exact",
"created_at": "2026-04-28T14:51:00.729Z",
"updated_at": "2026-11-04T08:36:03.522Z",
"reliability_band": "strong",
"location_precision_band": "approximate",
"time_precision_band": "exact",
"severity_band": "moderate",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
A
Info credibility
3
Event time
Aug 30, 2025, 00:00 UTC
Event time confidence
exact
Location
Cologne
Region
North Rhine-Westphalia
Primary actor
Russian military intelligence group GRU
Country
Germany
Countries
Germany
Tags
Russia, Germany, Federal Office for the Protection of the Constitution, Intelligence, Hybrid Warfare, Espionage, Sabotage, cyberattacks, APT28, GRU, low-level agents, Influence Operations, Migration, Recruitment, russia–ukraine war
Nodes
Node 1: Borders, Node 2: 5th Column
Signal
Submitted
Apr 28, 2026, 14:51 UTC
Germany's Verfassungsschutz adapts to growing Russian hybrid threats including sabotage, espionage, and influence operations, foiling sabotage plots in 2025.
In 2025, Germany's domestic intelligence agency, the Federal Office for the Protection of the Constitution (BfV), led by Vice President Sinan Selen, is reshaping its mission to confront escalating Russian hybrid warfare activities on German soil. Russian tactics reported include the use of 'low-level' or disposable agents managed through messaging apps for sabotage, cyberattacks targeting critical and secondary infrastructure, and disinformation campaigns designed to undermine German democracy and foster insecurity. An example is the arrest in May 2025 of Vladyslav T. and associates for planning sabotage involving freight transport to Ukraine using GPS trackers. Further intelligence indicates Moscow aims to recruit and indoctrinate ethnic Russian youth and students in the West as long-term influence agents reminiscent of old KGB methods. Following mass expulsions of Russian diplomats suspected of espionage, Russia reduced embassy-based spying, pivoting to covert methods including leveraging migration and political influence. The BfV is increasing efforts to educate businesses to protect against espionage and cyber threats, boosting surveillance and defensive capabilities. The agency seeks to assert a clearer, more modern mandate focused on early threat detection and prevention of foreign interference, in a context of renewed emphasis on homeland defense in Germany post the Ukraine war onset.
Confidence: High
The article provides an explicit account by German intelligence officials about discrete and concrete Russian hybrid actions on German soil, including sabotage plots, low-level agent networks, cyberattacks, and influence operations.
Source URL
https://welt.de/politik/deutschland/article68b17035adc6ba5d53cb08ab/Zeitenwende-fuer-den-Verfassungsschutz.html
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "d825b2ab-60bf-4bad-8431-daee10f2caba",
"url": "https://welt.de/politik/deutschland/article68b17035adc6ba5d53cb08ab/Zeitenwende-fuer-den-Verfassungsschutz.html",
"source": "extension",
"status": "approved",
"category": "Intelligence & Espionage",
"subcategory": "Human Intelligence (HUMINT)",
"incident_type": "Recruitment of locals",
"country": "Germany",
"source_reliability": "A",
"info_credibility": "3",
"tags": [
"Russia",
"Germany",
"Federal Office for the Protection of the Constitution",
"Intelligence",
"Hybrid Warfare",
"Espionage",
"Sabotage",
"cyberattacks",
"APT28",
"GRU",
"low-level agents",
"Influence Operations",
"Migration",
"Recruitment",
"russia–ukraine war"
],
"nodes": [
"Node 1: Borders",
"Node 2: 5th Column"
],
"countries": [
"Germany"
],
"where_text": "Land",
"headline": "Germany's Federal Office for the Protection of the Constitution shifts focus to counter Russian hybrid threats",
"description": "The Federal Office for the Protection of the Constitution (Bundesamt für Verfassungsschutz, BfV) in Germany is undergoing a transformation in response to growing Russian hybrid threats. Sinan Selen, Vice President of the BfV, detailed how Russia operates in Germany employing low-level agents, cyberattacks, and sabotage. A plot involving GPS tracker packages sent to Ukraine, intended to precede sabotage of freight transport, was foiled with arrests in May 2025. The BfV has observed tactics including cyberattacks on infrastructure and influence operations targeting migrants and students of Russian descent to co-opt them as long-term agents. Russian intelligence activities shifted after over 750 Russian diplomats were expelled across Europe following the Ukraine conflict. The BfV is also actively warning German industry on espionage risks and enhancing countermeasures. Transformation efforts include modernizing the agency and setting clearer strategic priorities focused on early detection and defense against foreign threats, with emphasis on Russian hybrid warfare techniques.",
"summary_short": "Germany's Verfassungsschutz adapts to growing Russian hybrid threats including sabotage, espionage, and influence operations, foiling sabotage plots in 2025.",
"summary_extended": "In 2025, Germany's domestic intelligence agency, the Federal Office for the Protection of the Constitution (BfV), led by Vice President Sinan Selen, is reshaping its mission to confront escalating Russian hybrid warfare activities on German soil. Russian tactics reported include the use of 'low-level' or disposable agents managed through messaging apps for sabotage, cyberattacks targeting critical and secondary infrastructure, and disinformation campaigns designed to undermine German democracy and foster insecurity. An example is the arrest in May 2025 of Vladyslav T. and associates for planning sabotage involving freight transport to Ukraine using GPS trackers. Further intelligence indicates Moscow aims to recruit and indoctrinate ethnic Russian youth and students in the West as long-term influence agents reminiscent of old KGB methods. Following mass expulsions of Russian diplomats suspected of espionage, Russia reduced embassy-based spying, pivoting to covert methods including leveraging migration and political influence. The BfV is increasing efforts to educate businesses to protect against espionage and cyber threats, boosting surveillance and defensive capabilities. The agency seeks to assert a clearer, more modern mandate focused on early threat detection and prevention of foreign interference, in a context of renewed emphasis on homeland defense in Germany post the Ukraine war onset.",
"actor_primary": "Russian military intelligence group GRU",
"target_primary": null,
"location_text": "Cologne",
"location_region": "North Rhine-Westphalia",
"location_coordinates_lat": 51.165691,
"location_coordinates_lon": 10.451526,
"location_precision": "Approximate",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article provides an explicit account by German intelligence officials about discrete and concrete Russian hybrid actions on German soil, including sabotage plots, low-level agent networks, cyberattacks, and influence operations.",
"event_time_utc": "2025-08-30T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "exact",
"created_at": "2026-04-28T14:51:00.729Z",
"updated_at": "2026-11-04T08:36:03.522Z",
"reliability_band": "strong",
"location_precision_band": "approximate",
"time_precision_band": "exact",
"severity_band": "moderate",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
A
Info credibility
3
Event time
Aug 30, 2025, 00:00 UTC
Event time confidence
exact
Location
Cologne
Region
North Rhine-Westphalia
Primary actor
Russian military intelligence group GRU
Country
Germany
Countries
Germany
Tags
Russia, Germany, Federal Office for the Protection of the Constitution, Intelligence, Hybrid Warfare, Espionage, Sabotage, cyberattacks, APT28, GRU, low-level agents, Influence Operations, Migration, Recruitment, russia–ukraine war
Nodes
Node 1: Borders, Node 2: 5th Column