Adversary Intelligence — 2026-11-09

Politico Europe Investigation Details How GRU Recruits Disposable Agents for European Sabotage Campaign

BLUFMoscow's disposable-courier model for sabotage operations shifts legal risk almost entirely onto unwitting intermediaries, and the Lithuanian and Polish trial outcomes will set the precedent for whether European courts can effectively deter this recruitment pipeline.

Lithuanian and Polish prosecutors are trying ten men, five in Lithuania and five in Warsaw, on charges of planning arson attacks using cargo parcels on behalf of the GRU, Politico Europe reported 12. All ten deny knowingly working for Russian intelligence and deny the terrorism charges 12. Lithuanian investigative files, cited by Politico, allege that Ukrainian national Vasilij Kovacs, 63 (rendered Vasyl Kovach by UA.News), moved massage pillows modified to conceal incendiary devices from Riga to Vilnius in June and July 2024, which he says he did unaware of their contents 12. A parcel burst into flames at Leipzig Airport on July 20, 2024, and a second ignited in a Birmingham warehouse two days later 1. A third caught fire in a truck near Warsaw on July 21 12. Lithuania's State Security Department report names GRU officer Denis Smolyaninov and former Russian submarine commander Andrei Baburov as likely involved, and describes recruitment of intermediaries over Telegram 12.

Analysis
Russia's use of disposable intermediaries lessens GRU exposure while burdening European prosecutors, who must prove intent when defendants claim to be unwitting couriers. The Lithuanian and Polish trials will test whether courts accept knowledge of a Russian intelligence role without direct evidence from handlers who remain abroad. Acquittals or reduced charges for couriers like Kovacs would signal that this model carries little legal risk for Moscow's recruiters. Naming GRU officer Smolyaninov and ex-submarine commander Baburov moves the issue from reported attacks to court files and gives investigators targets for sanctions or indictments. The defendants may simply be couriers for a criminal logistics ring, with the GRU link resting on intelligence assessments courts will not accept as proof. Confidence is low because a single Politico Europe report underlies the story, secondary outlets only repeat it, and defendants' knowledge and court outcomes remain unverified.

3 sources

Politico Europe
Lithuania and Poland try 10 suspects in GRU sabotage cases - UA.News
Lithuania and Poland try 10 suspects in GRU sabotage cases - Bytes Europe