July 8, 2026
European intelligence and security services have carried out a series of large-scale operations against Russian espionage networks over the past six months, dismantling more than ten networks operating across EU countries. The groups uncovered were involved in collecting military intelligence, preparing acts of sabotage, conducting cyber espionage, recruiting agents, and monitoring logistics routes used to deliver military assistance to Ukraine.
Experts note that the kremlin is increasingly moving away from traditional espionage methods toward hybrid operations involving mercenaries, radical groups, criminal elements, and recruited civilians.
Italy: A Major Blow to Russian Intelligence
One of the most high-profile counterintelligence operations was carried out by Italian security services. Counterintelligence officers and the Carabinieri uncovered a network collecting classified information related to Italy’s defense sector.
Among the main suspects were former officers of Italy’s counterintelligence agency AISI, Gavino Raoul Piras and Vincenzo Di Pasquale. Four serving members of the Italian Defense Ministry’s cyber unit and five civilian accomplices were also allegedly involved.
According to investigators, members of the network handed over military and industrial secrets in exchange for financial rewards. During searches, law enforcement officers seized €20,000 in cash. The operation was allegedly coordinated by a Russian intelligence officer operating under diplomatic cover.
Germany: A New Kremlin Tactic
German security agencies have identified a shift in Russian intelligence tactics. Instead of relying primarily on professional GRU and SVR operatives, Russian services are increasingly using so-called “one-off agents” recruited to carry out specific acts of sabotage.
In July, German authorities detained a group of individuals suspected of preparing arson attacks and other acts of sabotage. In late June, security forces also prevented a planned terrorist attack involving explosives.
Ukrainian defense suppliers remain a particular target of Russian intelligence services. In March, authorities arrested Ukrainian and Romanian nationals accused of gathering information about a German businessman who supplied drones and components to the Ukrainian Armed Forces.
Two Russian operatives were also detained on the Hungarian-Serbian border. According to investigators, they were coordinating preparations for sabotage operations in Germany.
Poland: A Blow to the FSB Network
Poland remains one of the main targets of Russian intelligence operations because of its role as a key logistics hub for military assistance to Ukraine.
In May, Poland’s Internal Security Agency detained three suspects allegedly acting on behalf of Russia’s Federal Security Service, the FSB. Investigators say they collected information about critical infrastructure, military facilities, and routes used to transport Western military assistance to Ukraine.
Austria: Countering Radio-Espionage
Austria, which has long been considered one of the centers of Russian intelligence activity in Europe, has also stepped up its counterintelligence efforts.
The Austrian government declared three Russian diplomats persona non grata. They were suspected of using diplomatic facilities as bases for electronic intelligence operations.
According to Austrian security services, specialized antennas installed on the roofs of diplomatic buildings were used to intercept government communications belonging to European states.
Sweden: Attempted Penetration of the Defense Sector
Following Sweden’s accession to NATO, Russian intelligence activity targeting the country has increased significantly.
The Swedish Security Service detained a former armed forces consultant who, according to investigators, allegedly used professional contacts and previous access to sensitive information to pass intelligence about Sweden’s defense capabilities and military planning to Russian intelligence services.
Key Trends
Analysts note that russia has effectively shifted toward a state of permanent hybrid warfare against European countries. Following the mass expulsion of diplomats and the exposure of professional intelligence officers, Russian security services are increasingly recruiting civilians, former military personnel, members of criminal networks, and individuals facing financial difficulties.
The main targets remain NATO defense-industry companies, weapons supply routes to Ukraine, defense-related cyber infrastructure, and protected government communications systems.
At the same time, recent operations point to an unprecedented level of coordination among the counterintelligence services of NATO and European Union member states. Joint law-enforcement efforts in Germany, Poland, Austria, Italy, and along cross-border routes demonstrate that Europe is taking an increasingly hard line against Russian espionage, pursuing a policy of zero tolerance toward kremlin intelligence networks.