The use of covert agents by Russia to destabilize Europe has become more sophisticated and covert than ever before. But here’s where it gets controversial: recent intelligence reports reveal that Moscow’s tactics are shifting away from traditional espionage toward a 'gig-economy' model of sabotage, relying heavily on disposable operatives recruited online. This approach allows Russia to carry out covert attacks that are deniable, decentralized, and harder for western authorities to trace. Such tactics threaten to deepen the divide within European nations and test the resilience of NATO.
According to groundbreaking research published by the Royal United Services Institute (RUSI), Russian intelligence officials are increasingly enlisting Ukrainians—often unwitting—through messaging platforms like Telegram or gaming websites to perform malicious activities. These acts include acts of arson, vandalism, and other forms of sabotage intended to weaken NATO’s cohesion and tarnish Ukraine’s reputation, as part of a broader, orchestrated effort.
The report highlights that, in addition to Ukrainians, individuals from various nationalities are being targeted for recruitment. The main motivator appears to be financial gain—payments are often made in cryptocurrencies, which are notoriously difficult to trace, ranging from hundreds to thousands of euros. The shift in methods reflects a move away from the Cold War-era reliance on highly trained spies; instead, Russia now outsources low-cost, highly deniable tasks to 'disposable agents' recruited entirely online—marking a new era of hybrid, decentralized sabotage.
While Moscow has consistently denied Western accusations of engaging in widespread sabotage and hybrid warfare, the evidence suggests a different story. The number of confirmed Russian-linked sabotage incidents across Europe has skyrocketed from just 2 in 2022 to 34 in 2024, involving various acts from damaging crucial undersea cables to arson and vandalism of military and civilian targets.
The authors of the report stress that these activities are not isolated or opportunistic but are part of a systematic and geographically targeted campaign designed to erode the support for Ukraine, test NATO’s 'red lines,' and weaken Western trust in national security systems. They warn that each minor incident should be viewed within the context of a larger pattern aimed at increasing the cost for Western nations supporting Ukraine.
Importantly, the report underscores the increased reliance on intermediaries and ‘disposable agents,’ especially from Ukraine, to execute sabotage activities. Many of these individuals are unaware of the complete scope or true nature of the tasks they undertake, making the recruitment process particularly insidious. This strategy is deliberately designed to produce plausible deniability for Russia, complicating Western response efforts.
A striking example provided is Poland, which frequently faces suspected Russian hybrid attacks. Recent incidents include detentions of Ukrainian nationals involved in sabotage, some believed to be exploited by Russia to foster distrust and political instability within Poland. One of the most alarming recent events involved an explosion on a key railway line vital for transporting aid to Ukraine—a move described by Polish officials as an unprecedented act of sabotage, with suspects fleeing to Belarus.
These developments raise critical questions about the future security landscape in Europe. Should Western nations develop new countermeasures, including defining what constitutes sabotage and employing counterterrorism tools to track illicit funding channels? How can NATO and EU member states better prepare for the evolving threats posed by covert, remotely orchestrated sabotage? And perhaps most provocatively—are we underestimating the true scale and sophistication of Russia’s hybrid war efforts?
In summary, the shift toward clandestine, deniable sabotage operations powered by ‘disposable agents’ presents a new challenge for Europe’s security infrastructure. As these tactics become more pervasive and nuanced, the question remains: How prepared are Western allies to confront this modern form of hybrid warfare—before it’s too late?
