World WatchListenLive TV

World / Europe

From $7 graffiti to arson and a bomb plot: How Russia’s

‘shadow war’ on NATO members has evolved
By Nick Paton Walsh, Sarah Dean and Karolina Jeznach, CNN. Video by Clayton Nagel, CNN
7 minute read · Updated 11:09 PM EDT, Wed July 10, 2024

Video Ad Feedback

See CCTV footage that led to capture of saboteur hired by Russia

04:48 - Source: CNN

(CNN) — Arson at warehouses linked to arms for Ukraine. Surveillance cameras where NATO trains
Ukrainian troops. Blunt vandalism of ministerial cars. Even an apparent, failed bomb plot.

Russia has been engaged in a “bold” sabotage operation across NATO’s member states for more than
six months, targeting the supply lines of weapons for Ukraine and the decision-makers behind it,
according to a senior NATO official.

Multiple security officials across Europe describe a threat that is metastasizing as Russian agents,
increasingly under scrutiny by security services and frustrated in their own operations, hire local
amateurs to undertake high-risk, and often deniable, crimes on their behalf.

The NATO official said they had observed “an unprecedented escalation and spread of Russia’s hybrid
warfare” over the past six months, which included “physical sabotage” on the supply line of NATO
weapons intended for Ukraine. “It is everything from point of production and origin, to storage, to
those who are making decisions, to the actual delivery,” the senior NATO official said. “It is bold.
Russia is attempting to intimidate (our) allies.”

Warsaw's largest shopping center, Marywilska 44, burns during a massive fire on May 12, 2024. Russia
was "likely" behind the fire, according to Polish Prime Minister Donald Tusk. Dariusz Borowicz/Agencja
Wyborcza.pl/Reuters

Russia has dismissed the claims as unfounded but Russian sabotage and hybrid warfare will be on
the agenda of the NATO 75th anniversary meeting in Washington, DC, which began Tuesday. Yet it is
unclear how publicly member states will express their outrage at what analysts have called the
Kremlin’s new “shadow war,” as they may be reluctant to provide Moscow with a propaganda win, or
foment alarm at a series of security breaches across Europe.

Recent high-profile arrests have revealed the ad-hoc, clumsy nature of how the Kremlin’s intelligence
operations have evolved since the start of the war in Ukraine. Last year, 14 Ukrainians and two
Belarusians were arrested in Poland in one case on suspicion of working for Russian intelligence. A
Ukrainian, who under Polish privacy law can be identified only as Maxim L., 24, was sentenced
to six years after weeks of receiving tasks from a Russian handler, Andrzej, whom he had never
physically met but encountered on the Telegram messaging app in February 2023.

Andrzej at first paid him $7 in digital currencies for spraying anti-war graffiti around Poland, Maxim
said. Yet the tasks soon became darker.
 Maxim L. was sentenced to six years after weeks of receiving tasks from a Russian handler whom he
had never physically met but encountered on the Telegram messaging app in February 2023. CNN has
blurred his face in line with Polish law. Jaroslaw Gorny/Imago

‘Easy money… it seemed so insignificant’

In a rare interview with CNN inside the maximum-security wing of Lublin prison, Maxim said he had
fled Ukraine to Poland in a frustrated bid to escape unemployment and poverty. “It was easy money,”
he said of the work Andrzej offered. “I needed money badly.”

He said he did not feel an obligation to fight for Ukraine after the Russian invasion in February 2022.
“That country has never done anything for me,” he said. “I don’t believe that just because you are born
in a certain country, you have to go to war for it. Don’t get me wrong: I am not pro-Russian, I am not
pro-Ukraine. I am not pro-anything.”

Andrzej soon started sending Maxim location pins where he should plant surveillance cameras along
the railway tracks near the border town of Medyka, through which military and humanitarian aid
would flow to Ukraine. “I didn’t think any of it could cause any actual harm. It seemed so insignificant,”
he said.

Andrzej later asked him to burn down the fence of a Ukrainian-owned transportation company in the
eastern Polish town of Biala Podlaska, he said, which Maxim says he faked, taking a photograph of
the fence with lumps of coal he had placed to mimic fire damage.

REL ATED A RTIC L E

Russia wants to confront NATO but dares not fight it on the battlefield – so it’s waging a hybrid
war instead
Yet Maxim’s slow realization that Andrzej was a Russian agent became complete, he said, when he
was told to put cameras outside a base where Poland was training Ukrainian soldiers. “That’s when I
knew it could be serious,” he said. “It made me feel uneasy. That was when I decided I’d quit. But I
never got a chance. I got arrested the next day.”

Polish internal security agents arrested Maxim on March 3, 2023, after weeks of surveillance, sparked
partially by the discovery of a gas station receipt Maxim had accidentally dropped on one of his
operations, according to a Polish official. Multiple other arrests followed this, making it the
largest known Russian espionage operation in Poland of recent times, raising concerns in Warsaw
about the extent of Moscow’s infiltration. Two Russian citizens were detained last August on suspicion
of recruiting to Wagner and a Polish man and two Belarusians this May for alleged arson.

Another Polish man was arrested in April 2024 for possessing ammunition, and surveilling Rzeszow
Jasionka airport, a hub for moving NATO arms to Kyiv, in a suspected plot to assassinate Ukraine’s
President Volodymyr Zelensky, who also frequently uses the facility.

The Polish plots join a series of incidents across Europe which, when viewed together, portray the
widescale ambition of Moscow’s operations. Russia was “likely” behind an arson attack that hit
Poland’s largest shopping center in May, Prime Minister Donald Tusk said, and suspicions have been
voiced about another fire at an ammunition factory, south of the capital, in June. Czech officials have
voiced concerns at Russian involvement in the hacking and disruption of its railways last year.

Demolition work at the Diehl Metal Applications manufacturing facility in Berlin, Germany, after it was
gutted by a fire that some believe Russia was behind. Sean Gallup/Getty Images
Last month, a suspicious fire hit a metals factory for a defense manufacturer outside Berlin, and a 26-
year-old pro-Russian Ukrainian was arrested after blowing himself up with a homemade bomb
near Paris Charles de Gaulle airport. A warehouse fire in East London in March led to two men being
charged by London’s Metropolitan Police Service with arson and assisting a foreign intelligence
service, namely Russia.

While the incidents have not all been definitively linked to Russian intelligence, they have been unified
by the apparent involvement of amateurs, or petty criminality aimed at spreading fear or disruption.

A ‘pretty dangerous game’

The senior NATO official said Russian sabotage on NATO states amounted to a “pretty dangerous
game, if (Russia believes) these things are always below the threshold of armed conflict,” that would
not trigger the NATO Article 5 stipulation that an attack on one member state is an attack on the entire
alliance. “Finding where that line is, is a difficult and dangerous calculation to make,” the official said,
adding that Russian President Vladimir Putin’s beleaguered invasion of Ukraine shows the Kremlin
head was not always getting good military advice.

Russia is using the “full gamut” of hybrid operations, the official added. “We see everything from high-
end operations in Europe, where we have seen as much as 400,000 euros ($433,000) paid for some
type of intelligence activity, to some places where thugs are being hired for a couple of
thousand euros.”

REL ATED A RTIC L E

‘Code 9.2’: The secretive Ukrainian drone unit tasked with dropping mines into Russia

A similar threat has grown on Russia’s border with NATO, in Estonia, where 10 suspected Russian
agents were arrested in February after the interior minister’s car was vandalized. The incident was a
high-profile peak in what Estonian officials have said is a years-long campaign by Moscow to
destabilize its tiny NATO neighbor, about a fifth of whose population of 1.3 million is Russian-
speaking, according to a 2021 analysis by the EU.

Recent months have seen GPS jamming impede civilian aircraft landings, and even the buoys that
demark part of Russia’s border with Estonia disappear, amid a short-lived call from Moscow for the
maritime frontiers to be reassessed.

Harrys Puusepp, a spokesman for the KAPO, Estonia’s internal security service, told CNN that Russian
activities had escalated over recent months. “We saw a significant rise in their activity in the last
autumn, and by winter, we were able to apprehend more than 10 (suspects). The number has grown
by now – persons who were involved in their hybrid activities against Estonian security – in a kind that
we hadn’t seen before.”

He said the operations were moving “towards physical attacks” and suggested the war in Ukraine
might lead to more aggressive Russian tactics in the months ahead, if operatives were redeployed to
the Baltic areas from the war.

“We have to face the facts. Russia is big enough to have resources to fight a war against Ukraine and
also maintain its security operations against European countries… against us. There are people who
take part in the war against Ukraine, and then they are rotated to some other region or area. They
have more experience. Their mindset is more violent. They are perhaps not so patient anymore trying
to get results.”

Up next
Russia wants to confront NATO but dares not fight it on the
battlefield – so it’s waging a hybrid war instead
11 minute read

Intelligence on Russian sabotage threat prompted increase

in security at US military bases in Europe
3 minute read

NATO allies call China a ‘decisive enabler’ of Russia in Ukraine

war as bloc eyes Asia security threats
5 minute read

Opinion: Ukraine deserves to hear the truth about NATO

5 minute read

Draft NATO communique describes Ukraine’s path to NATO as

irreversible, sources say
3 minute read

Most read
Crossbow killings suspect found after attack on BBC sport commentator’s wife
1
and daughters

Americans on TikTok are outraged about European tap water. Here’s what’s
2
really going on

A Black man got a job interview after he changed the name on his resume. Now,
3
he’s suing for discrimination

George Stephanopoulos gets blunt after Biden interview: ‘I don’t think he can
4
 serve four more years

I got inked by the world’s oldest tattoo artist

5
Violet Affleck makes impassioned plea for masks after revealing she ‘contracted
6
a post-viral condition in 2019’

Biden buys time but Democratic senator warns he could lose in ‘landslide’
7
George Clooney says Democrats need a new nominee just weeks after he
8
headlined a major fundraiser for Biden

The US economy faces a new threat

9
Suspect charged in gruesome murder and dismemberment of Pennsylvania
10
transgender teen

MORE FROM CNN

Russia wants to
confront NATO but
dares not fight it on
the battlefield – so
it’s waging a ...

Intelligence
on Russian
sabotage threat
prompted increase
in security at US ...

NATO allies call

China a ‘decisive
enabler’ of Russia
in Ukraine war as
bloc eyes Asia ...
NEWS & BUZZ

Crossbow killings
suspect found after
attack on BBC
sport
commentator’s ...

Americans on
TikTok are outraged
about European tap
water. Here’s
what’s really ...
 A Black man got a
job interview after
he changed the
name on his
resume. Now, ...

Search CNN...

Sign in

Live TV

Listen

Watch

World

US Politics

Business

Markets

Opinion

Health

Entertainment

Tech

Style

Travel

Sports

Watch

Listen

Science

Climate

Features

Weather

Ukraine-Russia War

Israel-Hamas War
 Paris Olympics

About CNN

World

FOL L OW C N N

Terms of Use Privacy Policy Cookie Settings Ad Choices Accessibility & CC About Newsletters Transcripts

© 2024 Cable News Network. A Warner Bros. Discovery Company. All Rights Reserved.
CNN Sans ™ & © 2016 Cable News Network.