European intelligence services are sounding the alarm: according to their estimates, Russia is stepping up preparations for sabotage on the continent. This is reported by The Financial Times, citing data from several intelligence agencies. In recent months, the number of incidents attributed to Russian agents has risen sharply, and experts fear an escalation in the near future. This is not just “hybrid warfare” — it is an attempt to undermine support for Ukraine and sow chaos in the EU and NATO.
Why now? Analysts attribute the escalation to several factors. First, Russia is seeking to disrupt arms deliveries to Ukraine: according to NATO estimates, the number of suspicious incidents increased tenfold between 2023 and 2025. Attacks on railways, warehouses, and bases are a direct blow to logistics.
Secondly, Moscow is testing NATO’s response. “Putin has become emboldened and is pushing boundaries on all fronts: disinformation, sabotage, hacking,” an unnamed European official told the FT. In October 2024, MI5 chief Ken McCallum accused the GRU of “reckless” actions through criminal gangs. CIA Director Bill Burns and MI6 chief Richard Moore echoed this, calling it a “reckless campaign of sabotage.”
Methods are evolving. Previously, cyberattacks and disinformation prevailed, but now physical attacks are more common. In 2025, NATO called the threat level “record high.” In 2023, Poland arrested a spy network that was planning explosions on rail lines for weapons to Ukraine; in the Czech Republic, they remember the 2014 explosion at an ammunition depot, attributed to the GUR. Even in the US, attempts to attack bases are being recorded.
If the FT is right, 2026 could bring new “surprises” – from cable disruptions to targeted attacks. Analysts predict that Putin will continue until he faces stiff resistance. Europe is on the verge of a new phase of “hybrid warfare.” Will this be a catalyst for greater NATO unity or a reason for division? The answer depends on how quickly the continent adapts. For now, intelligence agencies advise checking suspicious “tourists” and watching for drones over infrastructure.