Russia expands disinformation and sabotage operations in Europe

Russian influence operations are increasingly utilizing sophisticated tactics to mimic reputable Western media outlets. Researchers from NewsGuard have identified 906 instances of fake content designed to impersonate 163 media brands across 21 countries. These operations, including 'Matryoshka' and 'Storm-1516', use stolen logos, graphics, and similar web addresses to lend credibility to false reports. The frequency of these incidents has surged, with 421 cases recorded in the first half of 2026 compared to just 44 in the same period of 2025.

Parallel to these information operations, Russian military intelligence (GRU) is allegedly conducting physical sabotage activities using third-country nationals. Investigations in Germany suggest a network linked to the GRU may have operated through Slovakia. This network is being investigated in connection to an arson attack in Munich near defense companies and a planned arson attack on a Skyeton drone manufacturing plant near Prešov, Slovakia, which local police thwarted in August. German authorities are also investigating a drone-related explosive threat at Leipzig airport linked to these activities.