Adversary Intelligence — 2026-07-27

SBU Detains FSB Agents Accused of Plotting to Poison Ukrainian Soldiers at Fake Charity Party

BLUFMoscow's shift to disposable, Telegram-recruited proxies running parallel attack methods against soft social targets compresses the SBU's detection window while keeping the recruitment pipeline cheaply replaceable.

The SBU detained two FSB agents in the Kharkiv region on suspicion of plotting to poison Ukrainian servicemen with lethal substances at a staged "charity" party, in an operation personally coordinated by SBU chief Maj. Gen. Oleksandr Poklad, according to an SBU statement carried by Interfax-Ukraine and LB.ua 12. The agency said the two, recruited remotely via Telegram job offers, first carried out test tasks including photographing and filming military facilities and arson of a Defense Forces vehicle before renting a house and advertising the event on local Telegram channels, drawing several dozen prospective attendees, most from the Defense Forces 123. The SBU said the same suspects were separately tasked with building a 10-kilogram explosive device, and reported detaining one man carrying the device in a backpack and a woman synthesizing bomb components at the rented house 12. Both face charges under Ukraine's criminal code for attempted terrorist act and illegal handling of explosives and have been ordered held without bail, with the SBU stating they face potential life sentences 13.

Analysis
The graduated tasking, from arson to attempted mass poisoning and bomb-building, points to FSB handlers running disposable local recruits through escalating assignments rather than deploying trained operatives, probing multiple attack vectors while limiting exposure. The choice of an informal social gathering over a hardened target marks a deliberate pivot toward soft-context lethality when servicemen's guard is down. Splitting bomb-making and poisoning tasks across the same two agents complicates SBU efforts to profile recruitment by method, and the Telegram job-posting channel that drew economically vulnerable recruits remains open for reuse even after this interception. A single, uncorroborated SBU statement, republished rather than independently verified by other outlets, underpins the account and may serve a deterrence function discouraging troops from unofficial gatherings regardless of the plot's actual operational maturity.

5 sources