The Kremlin has initiated a fresh wave of sabotage against European defense facilities supplying Ukraine, employing a strategy of plausible deniability to avoid triggering NATO's Article 5, according to Western intelligence sources cited by The Telegraph.
This tactic involves enlisting local criminal gangs to carry out the attacks while officers from the GRU, Russia's military intelligence agency, stay safely within Russian borders. These recruits receive instructions through messaging apps like Telegram and are paid in cryptocurrencies, often unaware of their connection to Moscow.
Normunds Mežviets, head of Latvia’s state security service, clarified in an interview with The Telegraph: "From our experience, we don't see GRU officers traveling physically to our country. No, they remain in Russia, where they are secure. They don't take any risks regarding their operational or physical safety."
The August Incidents: A Closer Look
In August alone, three significant incidents were recorded. On August 15, a deliberate fire destroyed a building of Milrem Robotics in Tallinn, Estonia. This company supplies unmanned ground vehicles to Ukraine and is one of only two foreign suppliers of such weaponry to Kyiv. Latvia apprehended three of its own citizens in connection with the attack.
Five days earlier, on August 10, a massive explosion devastated facilities of EMCO, one of Bulgaria's largest private ammunition manufacturers, which produces 155 mm shells for the Ukrainian army. The fire was ignited by a burning truck parked next to a warehouse, prompting Bulgarian authorities to declare a partial disaster state within a 500-meter radius.
On August 13, an explosion hit the KNDS Ammo Italy plant in Colleferro, near Rome, shaking the powder processing unit. Both Italy and Bulgaria publicly downplayed any Russian involvement, a reaction analysts suggest reflects the very division Moscow seeks to exploit within the Alliance.
Historical Patterns of Sabotage
This pattern is not new. In March, a fire nearly destroyed the Czech LPP Holding plant in Pardubice, a manufacturer of drones and thermal optics for Ukraine, with four suspects detained.
Meanwhile, Lithuania prosecuted six individuals—including Cuban nationals accused of Russia-linked sabotage—for attempting to set fire to a factory producing radio spectrum analysis equipment for Kyiv, an operation the prosecution directly attributed to the GRU.
A NATO official warned that "in recent years, Russia has intensified its destabilization campaigns against allies through cyberattacks, assassination attempts, and acts of sabotage."
The strategy, according to Western intelligence, is calculated to stay just below the threshold that would trigger the collective mutual defense clause, as Moscow gauges how far it can push without provoking a NATO response.
Evolving Tensions and Strategic Implications
This escalation is happening amidst rising tensions: In late July, a Russian Kh-101 missile struck Polish territory, described as the most serious breach of NATO space since the invasion began.
Days later, U.S. intelligence warned that Putin might authorize hybrid operations and deniable measures on allied territory to test Western responses.
NATO Secretary General Mark Rutte has warned that Putin is preparing Russia to use force against the Alliance "in five years," and every unpunished attack allows Moscow to refine its understanding of NATO's limits.
What began as a concentrated threat on the eastern flank, concludes The Telegraph, "is shifting westward and becoming the new normal in the confrontation between the Alliance and Moscow."
Understanding Russia's Sabotage Tactics in Europe
What is the strategy behind Russia's sabotage of European arms factories?
Russia employs a strategy of plausible deniability, using local criminal gangs to conduct sabotage while GRU officers remain in Russia. This approach aims to avoid crossing the threshold that would trigger NATO's collective defense mechanisms.
How does Russia ensure its operatives remain anonymous in these operations?
Operatives receive instructions through encrypted messaging apps, like Telegram, and are compensated in cryptocurrencies, often unaware of their connection to Moscow, ensuring anonymity and maintaining plausible deniability.
Why are countries minimizing the possibility of Russian involvement in these incidents?
Publicly downplaying Russian involvement could be a strategic move to avoid escalating tensions within NATO, reflecting internal divisions that Moscow aims to exploit.