Adversary Intelligence — 2026-10-25

Russian Espionage Shifts to Disposable Gig Operatives After 700 Intelligence Officer Expulsions

BLUFMoscow's shift to disposable, app-recruited proxies turns every cheap failed plot into a resource drain on European security services, sustaining the threat despite 700 officer expulsions.

Elena Grossfeld of King's College London, writing in The Conversation 1, reports that more than 400 Russian intelligence officers under diplomatic cover were expelled across Europe within months of the 2022 invasion of Ukraine, a total that has since passed 700 12. She writes that Moscow has since shifted to disposable "gig-economy" operatives, recruited on messaging apps and paid in cryptocurrency, who are often unaware of their handlers or mission goals 1. Tasks have included arson, beatings, kidnappings and assassination plots on US soil 1. In August 2026, an explosives-laden drone crashed into the wing of a parked Ukrainian cargo plane at Leipzig/Halle Airport but failed to detonate 1. The article cites a report by MP Graeme Downie putting annual UK costs of Russian hostile activity at no less than £2 billion 13.

Analysis
Russian sabotage now runs on expendable recruits rather than diplomatic-cover officers, shifting the counterintelligence burden from tracking known residents to detecting anonymous, short-lived proxies. Expulsions removed the declared platform but not the operations, which moved to messaging apps and cryptocurrency payments that evade traditional surveillance. The Leipzig/Halle drone failed through amateur execution, not restraint, and European services must treat each failed plot as a cost-imposition success for Moscow, since volume drains investigative resources. The gig model may instead reflect Russian capacity loss after the expulsions, with strategic logic imposed retroactively on forced improvisation. Confidence is low: the analysis rests on a single academic author, republished elsewhere without independent reporting, and neither the expulsion totals nor the Leipzig details are confirmed.
3 sources
  1. From elite spies to 'gig-economy' operatives: the changing face of Russian sabotage - The Conversation
  2. From elite spies to 'gig-economy' operatives: the changing face of Russian sabotage - NZCity
  3. Russian espionage evolves from elite spies to gig operatives - Asia Times/The Conversation

View in full brief →

UNCLASSIFIED // OPEN SOURCE