According to an investigation published by the German newspaper Die Zeit, Russia has conducted at least 50 diverse hybrid attacks against 13 European countries in recent years. These incidents include espionage activities, acts of sabotage, vandalism, cyberattacks, disinformation campaigns, and three attacks on underwater infrastructure in the Baltic Sea.
The primary goal of these operations is to destabilize European countries, undermine public trust in national governments, and foster an atmosphere of uncertainty and fear. The number of such incidents in Europe has increased significantly since Russia’s invasion of Ukraine. Identifying the perpetrators is often challenging, but in some cases, suspects have been arrested and found to be acting on behalf of Russian intelligence services.
The countries targeted by Russia’s hybrid operations include Germany, France, the United Kingdom, the Czech Republic, Slovakia, Poland, Romania, Bulgaria, Estonia, Latvia, Lithuania, Finland, and Sweden. Most of the incidents have not resulted in casualties, but as the publication notes, Russian intelligence operatives are no longer as concerned about avoiding them.
Previously, Russia deployed trained agents for such operations, but now the Kremlin recruits outsiders instead of sending its own operatives. Individuals with no prior connection to intelligence services or politics are recruited through Telegram groups and private contacts. Depending on the scale of the operation, they are promised anywhere from a few hundred to several thousand dollars. If successful, it is a low-cost victory for Russia. If they are caught, it represents no significant loss for Moscow, which will simply seek new recruits. Therefore, intelligence agencies classify these operatives as low-level, disposable agents.
Under diplomatic cover, GRU and FSB agents conduct intelligence-gathering operations aimed at obtaining sensitive information on the political and military plans of European countries. The uncovering of spy networks in Germany, France, and the Netherlands demonstrates the ongoing activity of Russian intelligence services in Europe.
In addition to physical operations, Russia actively employs information warfare tactics by spreading propaganda through social media and state-controlled media outlets. The objective of these campaigns is to deepen social divisions, influence public opinion, and disorient populations.
Another aim of these hybrid operations is to test NATO countries’ defense capabilities, identify vulnerabilities in infrastructure, and place additional strain on Western intelligence agencies.
In response to Russia’s hybrid attacks, NATO has begun updating its strategy to improve detection and deterrence. James Appathurai, NATO’s Deputy Assistant Secretary-General for Innovation, stated in a media interview that the scale of Russian hybrid attacks in Europe, the United States, and Canada has reached a level that would have been considered “completely unacceptable” five years ago.
NATO Secretary-General Mark Rutte also announced that the alliance had agreed on new measures to counter Russian hybrid threats, which pose a serious risk to member states’ security. This statement came amid accusations that Moscow is behind sabotage operations in Europe aimed at weakening support for Ukraine.
