Russia's Disposable Sabotage Network Across Europe
The Kremlin is increasingly recruiting civilians to conduct dangerous sabotage operations via intermediaries.
1The Arrest of Vasilij Kovacs
Latvian authorities arrested 63-year-old Ukrainian national Vasilij Kovacs in March 2025 following a raid on his farmhouse. Police seized mobile phones, a pistol with a filed-off serial number, and a cellphone jammer. Kovacs now faces trial in Lithuania alongside four others for allegedly planning terrorist attacks on behalf of Russian intelligence.
2Incendiary Parcels in Transit
In July 2024, a parcel caught fire at Leipzig Airport while awaiting loading onto a DHL cargo plane. A similar incident occurred at a Birmingham warehouse shortly after, while another parcel ignited near Warsaw. These devices contained modified massage pillows and explosive nitromethane, intended to cause destruction within European logistics networks.
3The Disposable Agent Model
Western intelligence agencies describe these recruits as disposable agents. Often motivated by quick financial gain, these individuals are recruited via Telegram to perform isolated tasks like transporting packages. They frequently lack knowledge of the broader operation, ensuring that if they are caught, the wider intelligence network remains protected and easily replaceable.
4Shift in GRU Tactics
Since the 2018 Skripal poisoning and the 2022 invasion of Ukraine, the Russian GRU has faced significant operational difficulties in Europe. Consequently, they have shifted away from using their own officers for field tasks. Instead, they rely on complex chains of intermediaries to manage civilian recruits for high-risk sabotage missions.
5Kovacs' Role in Logistics
Kovacs claims he was merely helping an acquaintance, former Russian submarine commander Andrei Baburov, by transporting packages. He insists he was unaware of the contents or the ultimate purpose of the shipments. Investigators, however, allege he acted as a critical courier moving incendiary devices between Latvia and Lithuania for the GRU.
6The Chain of Intermediaries
The investigation revealed a convoluted network involving multiple layers of handlers and couriers. One intermediary, a former convict, was promised 4,000 euros monthly to manage the devices. When he struggled to follow instructions, handlers reorganized the operation, passing the parcels through various hands across the Baltic states to avoid detection.
7Evidence from Investigative Files
Lithuanian prosecutors compiled 8,000 pages of evidence, including surveillance footage, digital records, and DNA traces. These files document the movement of explosive-laden parcels through Airbnb apartments and various transit points. The evidence suggests a mix of meticulous intelligence planning alongside human incompetence, as recruits often failed to execute complex instructions.
8Social Ties as Recruitment Tools
Recruitment often leverages existing personal connections, such as family ties or shared professional backgrounds. Baburov, a key figure, utilized his relationship with Kovacs to facilitate the transport of illicit goods. Many recruits are identified as having financial instability or criminal records, making them vulnerable targets for intelligence handlers seeking cheap labor.
9The Role of Distraction
To evade customs inspections, the sabotage network utilized various methods to conceal the incendiary devices. Investigators discovered that sex toys were included in parcels alongside explosive cosmetics, likely intended as a distraction for customs officers. Despite these efforts, the devices were identified as the primary cause of multiple warehouse fires.
10Escalating Sabotage Operations
The threat has evolved beyond simple parcel bombs. By August 2026, security agencies reported explosive-laden drones targeting Leipzig/Halle Airport. Additionally, incidents involving incendiary devices near defense companies in Munich suggest a broader, ongoing campaign. These developments indicate that the GRU continues to refine its methods for conducting sabotage across European borders.
11Legal Challenges and Defense
All ten individuals currently facing trial in Lithuania and Poland maintain their innocence. They argue they did not knowingly work for Russian intelligence or participate in terrorism. The legal proceedings are complicated by the fragmented nature of the operation, where each participant only performed a small, seemingly benign part of the task.
12Broader Security Implications
The use of disposable agents represents a significant challenge for European counterintelligence agencies. Because these recruits are not professional spies, they are difficult to track until a physical incident occurs. This strategy forces security services to monitor a vast array of potential intermediaries, highlighting the persistent threat posed by Russian-backed sabotage.
Original article: Politico Europe — Russia's Disposable Sabotage Network Across Europe