The Internal Security Agency (ABW) of Poland released a public report covering 2024-2025 revealing intensified foreign intelligence operations on Polish soil. Russian intelligence, cooperating closely with Belarusian services, reportedly conducts large-scale espionage with tactics resembling special forces operations, including reconnaissance and sabotage potentially causing casualties, aiming at both military targets and critical civilian infrastructure. Russian espionage increasingly employs one-time low-cost agents recruited via Telegram and paid in cryptocurrency. Belarusian intelligence focuses on mass recruitment and coercion within Belarus and attempts to infiltrate Poland. Meanwhile, Chinese intelligence builds influence campaigns, especially among the Chinese diaspora, and cooperates with Russian actors in cyber and informational warfare. Notably, Russian and Belarusian threat actors deploy advanced persistent threat cyber groups (APT28, APT29, UNC1151) targeting Poland’s critical infrastructure and data systems. ABW conducted 69 espionage investigations in two years, with a sharp increase in 2025, and identified 91 suspected spies, charging 82 with criminal offenses under Polish law. Additionally, ABW highlights the rising radicalization of youth and isolated cases of jihadi-inspired terrorism linked to forced migration from Belarus. Arrests include teenagers planning bomb attacks inspired by ISIS. These developments indicate a broad hybrid warfare campaign against Poland involving kinetic, cyber, informational, and human intelligence threats, posing significant security challenges for national stability.

The Internal Security Agency (ABW) of Poland released a public report covering 2024-2025 revealing intensified foreign intelligence operations on Polish soil. Russian intelligence, cooperating closely with Belarusian services, reportedly conducts large-scale espionage with tactics resembling special forces operations, including reconnaissance and sabotage potentially causing casualties, aiming at both military targets and critical civilian infrastructure. Russian espionage increasingly employs one-time low-cost agents recruited via Telegram and paid in cryptocurrency. Belarusian intelligence focuses on mass recruitment and coercion within Belarus and attempts to infiltrate Poland. Meanwhile, Chinese intelligence builds influence campaigns, especially among the Chinese diaspora, and cooperates with Russian actors in cyber and informational warfare. Notably, Russian and Belarusian threat actors deploy advanced persistent threat cyber groups (APT28, APT29, UNC1151) targeting Poland’s critical infrastructure and data systems. ABW conducted 69 espionage investigations in two years, with a sharp increase in 2025, and identified 91 suspected spies, charging 82 with criminal offenses under Polish law. Additionally, ABW highlights the rising radicalization of youth and isolated cases of jihadi-inspired terrorism linked to forced migration from Belarus. Arrests include teenagers planning bomb attacks inspired by ISIS. These developments indicate a broad hybrid warfare campaign against Poland involving kinetic, cyber, informational, and human intelligence threats, posing significant security challenges for national stability.