{
  "id": "fd69d7ce-e114-4f74-b0b2-57cce51e8cca",
  "url": "https://uacrisis.org/en/dyversiyi-ta-sabotazh-gibrydnyj-front-rosiyi-proty-yes",
  "source": "extension",
  "status": "approved",
  "category": "Intelligence & Espionage",
  "subcategory": "Human Intelligence (HUMINT)",
  "incident_type": "Recruitment of locals",
  "country": "Spain",
  "source_reliability": "C",
  "info_credibility": "3",
  "tags": [
    "Russia",
    "EU",
    "sabotage",
    "hybrid warfare",
    "intelligence",
    "espionage",
    "offensive cyber operations",
    "energy security",
    "propaganda"
  ],
  "nodes": [
    "Node 2: 5th Column"
  ],
  "countries": [
    "Spain"
  ],
  "where_text": "Land",
  "headline": null,
  "description": "Western media reported that Russia has established a special unit tasked with organizing sabotage and covert attacks in Europe, targeting defense-industry enterprises, universities, financial institutions, and conducting kidnappings and assassinations. Russian intelligence recruits operatives through messaging apps, typically marginal or pro-Russian ideologically motivated individuals, especially Ukrainians relocated to Europe. Major challenges for Western intelligence are encrypted communication monitoring and rapid cyber response. Arrest of Telegram CEO Pavel Durov in Paris is linked to control over Russian intelligence activities. Russia seeks to create fear of large-scale continental war, exploiting vulnerabilities in energy and cyberspace, with notable incidents including a blackout in the Iberian Peninsula in April 2025. Kremlin prioritizes pressuring financial elites supporting Ukraine, particularly in the European defense-industrial complex, plus using propaganda to induce anxiety around Ukraine support. In 2024, U.S. and German intelligence reported Russia's plot to assassinate Rheinmetall's CEO, Armin Papperger. Russia also employs scientific diplomacy for espionage through institutions like the Peoples’ Friendship University of Russia and recruits European academic sympathizers, especially far-left ideologies, to stage public demonstrations often amplified by Russian media, notably in Southern Europe.",
  "summary_short": "Russia operates a special unit conducting sabotage and covert attacks in Europe to undermine support for Ukraine by targeting defense industries, recruiting operatives via encrypted messaging, and exploiting energy and cybersecurity vulnerabilities.",
  "summary_extended": "At the start of 2025, Russia formed a specialized sabotage unit operating covertly in European Union countries to undermine Western military support for Ukraine. This unit infiltrates defense industry firms, universities, and financial entities, leveraging encrypted messaging apps to recruit locals—especially pro-Russian Ukrainians and marginal individuals—to conduct sabotage or discredit Ukraine within Europe. Significant incidents include a 2024 assassination plot against Rheinmetall's CEO, Armin Papperger. Russia employs scientific diplomacy and far-left European sympathizers to further its espionage and propaganda aims, amplifying public demonstrations to sow discord. The April 2025 energy blackout on the Iberian Peninsula is considered a warning signal of growing Russian efforts to exploit European vulnerabilities in energy supply and cyberspace. The arrest of Telegram CEO Pavel Durov in Paris is interpreted as part of wider attempts to control Russian intelligence tactics. Overall, these covert operations aim to instill fear of continental war and erode European unity in support of Ukraine.",
  "actor_primary": "Russian intelligence services",
  "target_primary": null,
  "location_text": "Iberian Peninsula",
  "location_region": "Southern Europe",
  "location_coordinates_lat": 40,
  "location_coordinates_lon": -4,
  "location_precision": "Regional",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The report details confirmed Russian state-directed covert and sabotage operations across multiple European countries aimed at destabilizing support for Ukraine, including recruitment, espionage, energy attacks, and assassination plots indicating clear hostile intent.",
  "event_time_utc": "2025-05-30T21:18:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "unknown",
  "created_at": "2026-02-14T12:22:56.268Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "regional",
  "time_precision_band": "unknown",
  "severity_band": "moderate",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

{
  "id": "fd69d7ce-e114-4f74-b0b2-57cce51e8cca",
  "url": "https://uacrisis.org/en/dyversiyi-ta-sabotazh-gibrydnyj-front-rosiyi-proty-yes",
  "source": "extension",
  "status": "approved",
  "category": "Intelligence & Espionage",
  "subcategory": "Human Intelligence (HUMINT)",
  "incident_type": "Recruitment of locals",
  "country": "Spain",
  "source_reliability": "C",
  "info_credibility": "3",
  "tags": [
    "Russia",
    "EU",
    "sabotage",
    "hybrid warfare",
    "intelligence",
    "espionage",
    "offensive cyber operations",
    "energy security",
    "propaganda"
  ],
  "nodes": [
    "Node 2: 5th Column"
  ],
  "countries": [
    "Spain"
  ],
  "where_text": "Land",
  "headline": null,
  "description": "Western media reported that Russia has established a special unit tasked with organizing sabotage and covert attacks in Europe, targeting defense-industry enterprises, universities, financial institutions, and conducting kidnappings and assassinations. Russian intelligence recruits operatives through messaging apps, typically marginal or pro-Russian ideologically motivated individuals, especially Ukrainians relocated to Europe. Major challenges for Western intelligence are encrypted communication monitoring and rapid cyber response. Arrest of Telegram CEO Pavel Durov in Paris is linked to control over Russian intelligence activities. Russia seeks to create fear of large-scale continental war, exploiting vulnerabilities in energy and cyberspace, with notable incidents including a blackout in the Iberian Peninsula in April 2025. Kremlin prioritizes pressuring financial elites supporting Ukraine, particularly in the European defense-industrial complex, plus using propaganda to induce anxiety around Ukraine support. In 2024, U.S. and German intelligence reported Russia's plot to assassinate Rheinmetall's CEO, Armin Papperger. Russia also employs scientific diplomacy for espionage through institutions like the Peoples’ Friendship University of Russia and recruits European academic sympathizers, especially far-left ideologies, to stage public demonstrations often amplified by Russian media, notably in Southern Europe.",
  "summary_short": "Russia operates a special unit conducting sabotage and covert attacks in Europe to undermine support for Ukraine by targeting defense industries, recruiting operatives via encrypted messaging, and exploiting energy and cybersecurity vulnerabilities.",
  "summary_extended": "At the start of 2025, Russia formed a specialized sabotage unit operating covertly in European Union countries to undermine Western military support for Ukraine. This unit infiltrates defense industry firms, universities, and financial entities, leveraging encrypted messaging apps to recruit locals—especially pro-Russian Ukrainians and marginal individuals—to conduct sabotage or discredit Ukraine within Europe. Significant incidents include a 2024 assassination plot against Rheinmetall's CEO, Armin Papperger. Russia employs scientific diplomacy and far-left European sympathizers to further its espionage and propaganda aims, amplifying public demonstrations to sow discord. The April 2025 energy blackout on the Iberian Peninsula is considered a warning signal of growing Russian efforts to exploit European vulnerabilities in energy supply and cyberspace. The arrest of Telegram CEO Pavel Durov in Paris is interpreted as part of wider attempts to control Russian intelligence tactics. Overall, these covert operations aim to instill fear of continental war and erode European unity in support of Ukraine.",
  "actor_primary": "Russian intelligence services",
  "target_primary": null,
  "location_text": "Iberian Peninsula",
  "location_region": "Southern Europe",
  "location_coordinates_lat": 40,
  "location_coordinates_lon": -4,
  "location_precision": "Regional",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The report details confirmed Russian state-directed covert and sabotage operations across multiple European countries aimed at destabilizing support for Ukraine, including recruitment, espionage, energy attacks, and assassination plots indicating clear hostile intent.",
  "event_time_utc": "2025-05-30T21:18:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "unknown",
  "created_at": "2026-02-14T12:22:56.268Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "regional",
  "time_precision_band": "unknown",
  "severity_band": "moderate",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}