Full Breakdown
Russia's Hybrid Warfare and Drone Incursions: A Growing Threat to Europe
11/8/2025, 1:50:07 AM
Overview of Hybrid Warfare Tactics
During its ongoing conflict with Ukraine, Russia has established a network of agents to conduct acts of sabotage across Europe, as detailed in a study by GLOBSEC and the International Center for Counter-Terrorism (ICCT). This network combines government agencies, organized crime, and individuals with criminal backgrounds, primarily Russian-speaking men motivated by financial incentives. The study highlights that between January 2022 and July 2025, there were 110 acts of sabotage linked to Russia, with 89 successful attacks, predominantly in Poland and France. Recruitment for these operations often occurs online, particularly through the Telegram messaging app.
The Role of Illicit Finance
The study emphasizes that Russia's hybrid operations are closely tied to illicit finance and sanctions evasion. The Kremlin utilizes shadow financial operations to covertly move money, pay operatives, and sustain its war economy. This intertwining of criminal networks with state-sponsored activities complicates the EU's response to these threats, as it allows Russia to deny involvement in various attacks.
Recent Drone Incursions
The threat of hybrid warfare has been underscored by a series of drone incursions into NATO airspace, particularly in Poland and Romania. In September 2023, over 20 Russian drones entered Polish airspace, prompting the deployment of advanced defense systems. The American Merops system, which can detect and neutralize drones using artificial intelligence, is being deployed in Poland, Romania, and Denmark to bolster defenses against these incursions. NATO officials have noted that the Merops system is crucial for addressing the vulnerabilities exposed by these drone activities.
Official Responses and Recommendations
European Commission President Ursula von der Leyen has characterized these incursions as part of Russia's hybrid warfare strategy, aimed at sowing division within Europe. In response, the EU is tightening visa regulations for Russian nationals to enhance security scrutiny. The study's authors recommend improved monitoring of online platforms and a broader definition of hybrid threats to include non-state actors and criminal organizations.
Criticism and Opposition
Critics, including Polish politician Bartlomiej Sienkiewicz, argue that the EU's current measures are insufficient to combat the recruitment of agents through platforms like Telegram. There is a call for more decisive action to disrupt these networks and prevent further acts of sabotage.
Conflicting Reports and Gaps
While the study identifies a significant number of sabotage incidents, the exact origins of many drone incursions remain unclear, with some not definitively linked to Russia. This ambiguity complicates the EU's ability to formulate a unified response to the hybrid threats posed by Russia.
What's Next?
As NATO continues to enhance its eastern defenses, the deployment of the Merops system marks the beginning of a broader strategy to counter drone threats. The situation remains fluid, with ongoing discussions about strengthening cooperation between public and private sectors to combat hybrid warfare effectively.
Verbatim Quotes
- "Today, a new crime-terror nexus has emerged in Europe — this time orchestrated by a state actor – Russia." — Researcher, GLOBSEC
- "No one shot them down. We want to take action against people recruited by Russia." — Bartlomiej Sienkiewicz, Member of the European Parliament
- "Illicit finance, criminality, and hybrid operations are not separate challenges but elements of a single playbook." — Researchers, GLOBSEC and ICCT
- "This system provides very precise detection." — Colonel Mark McLellan, NATO Allied Land Command
