Adversary Intelligence — 2026-04-27

International Law Enforcement Dismantles Russian Intelligence-Directed Sabotage Network Operating Across EU

Ukraine's Prosecutor General's Office, in coordination with National Police and several EU law enforcement agencies, announced on April 27 the dismantling of a Russian intelligence-directed network organizing contract killings and infrastructure sabotage across the EU since at least August 2024. The Prosecutor General's statement identified 13 suspects: nine detained and four subject to European arrest warrants, from among dozens of participants spanning multiple countries. In Lithuania, investigators thwarted a contract killing and detained one suspect during active attack preparations after network members had surveilled targets' residences, routes, and daily routines. The network also collected data on military facilities and equipment bound for Ukraine and prepared arson and sabotage at a military enterprise elsewhere in the EU.

Analysis
The scope and structure of the dismantled network, simultaneous tasking against civilian infrastructure, military logistics nodes, and individual targets, points to GRU or FSB case-officer management rather than autonomous proxy recruitment. Lithuania members tracking residences and daily routes indicates Russia was developing pre-attack groundwork for physical assassination on EU soil, not conducting strategic reconnaissance. Forged documents, controlled financial channels, and a layered hierarchy of observers, intermediaries, financiers, and perpetrators, reported primarily through Ukraine's Prosecutor General's Office with inherent interest-alignment risk and only partial corroboration from the Kyiv Independent and RFE/RL, confirm centralized state direction. Russia will likely sustain or expand directed covert action against NATO member states over the next 12 months. No prior dismantlement has demonstrably deterred successor operations, and reporting that European sabotage operations have quadrupled since 2023 signals an institutional commitment that tactical arrests will not reverse. The announcement may instead reflect a Ukrainian decision to publicize a disrupted capability to demonstrate intelligence cooperation value ahead of ongoing EU security assistance negotiations, rather than a disclosure driven by the threat's novelty.
3 sources
  1. Law enforcement exposes network preparing serious crimes in EU for Russian intelligence - Interfax-Ukraine
  2. Kyiv uncovers suspected Russian agent network planning sabotage in Ukraine, Europe - Kyiv Independent
  3. Report: Russian Sabotage Operations Across Europe Have Quadrupled Since 2023 - RFE/RL

View in full brief →

UNCLASSIFIED // OPEN SOURCE