# Russia's Disposable Sabotage Network Across Europe The Kremlin is increasingly recruiting civilians to conduct dangerous sabotage operations via intermediaries. - **Source:** [Politico Europe](https://www.politico.eu) - **Published:** 2026-11-09 - **Topic:** [world](https://brifing.si/c/world) - **Original article:** - **On Brifing:** https://brifing.si/s/e7a928a1-962d-4e2b-a416-b398b54413a5 ## The Arrest of Vasilij Kovacs Latvian authorities arrested 63-year-old Ukrainian national Vasilij Kovacs in March 2025 following a raid on his farmhouse. Police seized mobile phones, a pistol with a filed-off serial number, and a cellphone jammer. Kovacs now faces trial in Lithuania alongside four others for allegedly planning terrorist attacks on behalf of Russian intelligence. ## Incendiary Parcels in Transit In July 2024, a parcel caught fire at Leipzig Airport while awaiting loading onto a DHL cargo plane. A similar incident occurred at a Birmingham warehouse shortly after, while another parcel ignited near Warsaw. These devices contained modified massage pillows and explosive nitromethane, intended to cause destruction within European logistics networks. ## The Disposable Agent Model Western intelligence agencies describe these recruits as disposable agents. Often motivated by quick financial gain, these individuals are recruited via Telegram to perform isolated tasks like transporting packages. They frequently lack knowledge of the broader operation, ensuring that if they are caught, the wider intelligence network remains protected and easily replaceable. ## Shift in GRU Tactics Since the 2018 Skripal poisoning and the 2022 invasion of Ukraine, the Russian GRU has faced significant operational difficulties in Europe. Consequently, they have shifted away from using their own officers for field tasks. Instead, they rely on complex chains of intermediaries to manage civilian recruits for high-risk sabotage missions. ## Kovacs' Role in Logistics Kovacs claims he was merely helping an acquaintance, former Russian submarine commander Andrei Baburov, by transporting packages. He insists he was unaware of the contents or the ultimate purpose of the shipments. Investigators, however, allege he acted as a critical courier moving incendiary devices between Latvia and Lithuania for the GRU. ## The Chain of Intermediaries The investigation revealed a convoluted network involving multiple layers of handlers and couriers. One intermediary, a former convict, was promised 4,000 euros monthly to manage the devices. When he struggled to follow instructions, handlers reorganized the operation, passing the parcels through various hands across the Baltic states to avoid detection. ## Evidence from Investigative Files Lithuanian prosecutors compiled 8,000 pages of evidence, including surveillance footage, digital records, and DNA traces. These files document the movement of explosive-laden parcels through Airbnb apartments and various transit points. The evidence suggests a mix of meticulous intelligence planning alongside human incompetence, as recruits often failed to execute complex instructions. ## Social Ties as Recruitment Tools Recruitment often leverages existing personal connections, such as family ties or shared professional backgrounds. Baburov, a key figure, utilized his relationship with Kovacs to facilitate the transport of illicit goods. Many recruits are identified as having financial instability or criminal records, making them vulnerable targets for intelligence handlers seeking cheap labor. ## The Role of Distraction To evade customs inspections, the sabotage network utilized various methods to conceal the incendiary devices. Investigators discovered that sex toys were included in parcels alongside explosive cosmetics, likely intended as a distraction for customs officers. Despite these efforts, the devices were identified as the primary cause of multiple warehouse fires. ## Escalating Sabotage Operations The threat has evolved beyond simple parcel bombs. By August 2026, security agencies reported explosive-laden drones targeting Leipzig/Halle Airport. Additionally, incidents involving incendiary devices near defense companies in Munich suggest a broader, ongoing campaign. These developments indicate that the GRU continues to refine its methods for conducting sabotage across European borders. ## Legal Challenges and Defense All ten individuals currently facing trial in Lithuania and Poland maintain their innocence. They argue they did not knowingly work for Russian intelligence or participate in terrorism. The legal proceedings are complicated by the fragmented nature of the operation, where each participant only performed a small, seemingly benign part of the task. ## Broader Security Implications The use of disposable agents represents a significant challenge for European counterintelligence agencies. Because these recruits are not professional spies, they are difficult to track until a physical incident occurs. This strategy forces security services to monitor a vast array of potential intermediaries, highlighting the persistent threat posed by Russian-backed sabotage. ## Sources covering this story - https://www.politico.eu/article/russia-hybrid-war-europe-low-level-agents/?utm_source=RSS_Feed&utm_medium=RSS&utm_campaign=RSS_Syndication — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._