< Back to situation

[REVISION HISTORY]

GRU-linked sabotage network in Europe

Updated 1 time since CLSTR started tracking revisions of this situation.

What changed

2026-09-26 07:25 UTC → 2026-09-26 15:43 UTC · added removed

Slovak authorities initially thwarted a planned arson attack on the Skyeton drone manufacturing plant in Haniska, near Prešov. The plot, which targeted a facility producing unmanned systems for the Ukrainian military, resulted in the detention of four suspects, including citizens of Ukraine and Latvia. A group calling itself ‘Global Citizens Against War 1984’ claimed responsibility, though investigators noted that images released by the group appeared to be AI-generated. Subsequent investigations by security services have linked these activities to a broader network operating out of Slovakia. This network is allegedly managed by a specialized unit of the Russian military intelligence agency, GRU, which utilizes Telegram for recruitment and cryptocurrency for payments. The network has been implicated in various hybrid attacks across Europe, including an arson attack in Munich, Germany, targeting a construction site near the headquarters of Rohde & Schwarz—a drone supplier to the Ukrainian armed forces—and a drone attack attempt at Leipzig/Halle airport. In Munich, two Bulgarian nationals were arrested following an arson attempt on September 3 near the headquarters of technology and defense companies Rohde & Schwarz and Helsing. German investigators have linked this incident, along with the August 4 drone attack at Leipzig/Halle airport, to the GRU’s Special Activities Service. In Slovakia, the thwarted attack on the Skyeton factory posed a risk to approximately 70 employees and could have caused tens of millions of euros in damage. Following these developments, Slovak opposition parties have called on Prime Minister Robert Fico to convene the Security Council to address the threat posed by Russian operations on Slovak soil.

Versions

  1. 2026-09-26 15:43 UTC GRU-linked sabotage network in Europe
  2. 2026-09-26 07:25 UTC GRU-linked sabotage network in Europe

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.