Adversary Intelligence — 2026-09-04
German Police Arrest Two Bulgarians After Molotov Attack on Rohde and Schwarz Defense Headquarters in Munich
BLUFProsecutors are unlikely to attribute the Rohde & Schwarz attack to Russian state direction before early December, reinforcing a pattern where disposable-agent tradecraft outruns Western evidentiary standards.
German police arrested a 28-year-old woman and a 38-year-old man, both Bulgarian nationals, at a Munich petrol station shortly after midnight Thursday, after Molotov cocktails were thrown from a car at a building site fronting the Rohde & Schwarz defense complex 1234. One device ignited near construction containers and was extinguished with minor damage and no injuries; a second, unexploded device was defused by police robot specialists 124. Bavaria's LKA and Munich's prosecutor's office took over the case citing a suspected political motive; the two suspects, who have no prior police record, face a hearing before an investigating judge on arrest warrants, and a spokesman said investigators have not confirmed they threw the devices or identified which company in the complex, which also houses drone maker Helsing, was the intended target 24. Germany's BfV had separately warned defense contractors in July of heightened sabotage risk from Russian state actors, a theory investigators are now weighing given a 2021 arson on Munich's power grid that similarly named Rohde & Schwarz and was previously blamed on anarchist networks, amid suspicion Bulgarian nationals are being used as low-level 'disposable agents' for Russian sabotage 24.
AnalysisPublic attribution to Russian direction or a Russia-linked proxy network is
unlikely before early December: Bavarian investigators have not confirmed the detainees threw the devices or identified who tasked or funded them, and the disposable-agent model seen in UK, French, and prior German sabotage cases is designed to defeat exactly this evidentiary chain. Prosecutors are more likely to close the case citing a vague political motive than to name a state sponsor. Confidence is moderate, resting on a single primary account corroborated only by secondary wire pickups with no independent forensic or signals evidence yet public. The throw also fits a five-year pattern of roughly 50 attacks tied to a domestic leftist-anarchist network that has previously named Rohde & Schwarz as a target, independent of Russian tasking. Absent confirmed state linkage, Berlin will treat the case as pattern-consistent rather than proven and withhold the expulsions and protective details a confirmed link would justify.
5 sources
- Munich Molotovs, Bulgarian passports: the cheap hands of a spy service that lost its embassies - EUalive
- Mutmasslicher Anschlag auf Konzern in München – zwei Bulgaren unter Verdacht - watson.ch
- Brandanschlag auf Rüstungskonzern in München vermutet - 20 Minuten
- Brandsätze auf Rüstungsfirmen in München werfen alte Fragen auf - nd-aktuell.de (Neues Deutschland)
- Brandattacke auf Baustelle: LKA vermutet Anschlagversuch auf Rüstungsunternehmen in München – zwei Festnahmen - Deutsche Presse-Agentur (dpa), via Tagesspiegel
View in full brief →