Russia-NATO hybrid warfare tensions

In late July 2026, Russia launched a coordinated hybrid campaign against the Baltic NATO members, mixing propaganda, disinformation, cyber‑attacks, covert influence operations and electronic‑warfare tactics such as mis‑directed explosive drones, GPS‑spoofing that let a Ukrainian drone enter Lithuanian airspace, and spoofed drones triggering indoor‑stay warnings in Helsinki. The actions were framed as the opening phase of a broader strategy to weaken regional resistance and test NATO’s credibility.

A week later, Moscow publicly accused NATO of direct involvement in Ukrainian strikes on Russian oil‑terminal facilities in the Leningrad and Kaliningrad regions, citing alleged documents and e‑mail exchanges that linked a hybrid‑warfare specialist and a senior Western intelligence officer to the provision of precise target coordinates to Ukraine’s security services.

On 7 August 2026, Russian officials reiterated the accusation, presenting material obtained by Russian hackers that named Bart de Vachter, a specialist with the Hybrid Analyse Vigilant Network (HAVN) described as connected to NATO special‑operations and intelligence units. The leaked correspondence purportedly showed de Vachter supplying exact coordinates for oil terminals and a Gazprom LNG tanker to the Ukrainian Security Service, and referenced a July 4 Ukrainian drone attempt on a terminal in the Kirzhsky area of St Petersburg that was intercepted without casualties. The claims remain unverified, but they mark a continued escalation of the information war and a shift from covert hybrid actions in the Baltics to overt blame of NATO for attacks on Russian territory.