The Evolution of Russian Sabotage Tactics in Modern Warfare
Russian hostile activities are estimated to cost the UK at least £2 billion annually, according to a report by Scottish MP Graeme Downie. This figure represents only a baseline, as a significant transformation in Moscow's approach to sabotage suggests that the true costs are likely to rise. While Russia continues to target critical infrastructure, it has shifted from employing highly trained operatives to utilizing inexpensive technology and expendable recruits. This change in strategy, which prioritizes quantity over quality, presents a more unpredictable threat.
The new operational model resembles distributed computing, where networks of unreliable components are expected to fail individually, yet the overall system remains functional. By executing a high volume of low-cost operations that often fail at the individual level, Russia still manages to achieve its objectives of causing psychological disruption and exhausting Western security services.
This transformation accelerated following Russia's full-scale invasion of Ukraine in 2022, which led to the expulsion of over 400 Russian intelligence officers operating under diplomatic cover across Europe. This number has since increased to more than 700. Contrary to expectations that this purge would cripple Russian spy networks, it has instead facilitated a pivot towards what researchers have termed "gig-economy" operatives.
These operatives, often recruited through messaging apps and compensated in cryptocurrency, are tasked with various acts of sabotage, including arson, property damage, and even assassination plots. Many of these individuals are unaware of their handlers or the true objectives of their missions. This strategy echoes former CIA chief James Woolsey's characterization of the post-Cold War security landscape as a "jungle of venomous snakes."
The nature of these operations has included mock coffins placed beneath the Eiffel Tower and graffiti intended to incite antisemitic tensions in Paris. Targets for arson have ranged from warehouses in London storing aid for Ukraine to an Ikea store in Lithuania. In a notable incident in 2025, Western intelligence narrowly averted disaster when incendiary devices planted on DHL cargo planes ignited in freight depots rather than mid-flight.
Escalation in Targeting Infrastructure and Airspace
Moscow's campaign has also extended to critical infrastructure. At sea, Russian-linked commercial vessels have engaged in increasingly aggressive actions, including severing power and data cables. This escalation has been supported by military maneuvers, such as scrambling fighter jets to deter Estonian authorities from approaching suspected vessels.
In the air, operations have evolved from electronic interference and drone surveillance to overt violations of airspace by Russian military aircraft. Armed drones have crashed or detonated in territories such as Poland, Latvia, and Moldova. A significant incident occurred in August 2026, when an explosives-laden drone crashed into a parked Ukrainian cargo plane in Germany, narrowly avoiding detonation.
Despite the apparent decline in professionalism within Russian intelligence, operational failures can still serve Moscow's purposes. A botched operation can generate media panic and exhaust European security services, projecting an image of menace that extends beyond Russia's actual capabilities. This principle also applies to cyber operations, where threats to critical infrastructure can achieve intimidation without causing physical damage.
Final Assessment
In 2025, cyberattacks on a Norwegian dam and a Swedish heating plant resulted in minimal physical damage but generated significant media attention and psychological effects. A cyberattack on a major Polish power and heating plant threatened to cut heat to half a million people during winter, highlighting the destructive potential of such operations.
Across various domains, Russia has effectively turned unpredictability and disruption into a strategic weapon. By employing poorly trained, expendable proxies directed remotely by state handlers, Moscow consistently achieves psychological disruption while minimizing casualties through operational failures. However, relying on Russian incompetence as a safeguard for European lives is not a viable strategy, as the old adage reminds us: hope is not a strategy.
