German authorities have linked multiple sabotage attempts, including attacks in Munich and Leipzig, to a Russian military intelligence network operating partly from Slovakia.

German investigators have uncovered a sabotage network tied to Russia’s military intelligence agency, the GRU, with operations reportedly based in Slovakia. The network is linked to an arson attack in Munich on September 3, a thwarted sabotage attempt at a drone manufacturer near Prešov, Slovakia, and an attempted explosive drone attack at Leipzig-Halle Airport on August 4. These incidents targeted facilities connected to Ukraine’s defense efforts, underscoring the network’s strategic focus.

According to German security services, the Munich attack involved incendiary devices thrown near Rohde & Schwarz and Helsing, companies associated with defense technology and support for Ukraine. Two Bulgarian nationals detained after the attack were identified as part of the GRU-linked group operating from Slovakia. Slovak authorities also foiled an arson plot targeting Skyeton, a drone manufacturer near Prešov, detaining Latvian and Ukrainian suspects. Another suspect was apprehended in Germany, highlighting the network’s transnational reach.

Investigators revealed that the GRU employs a decentralized operational model, recruiting individuals from various nationalities through intermediaries. These operatives, often unaware of their ultimate handlers, are recruited via platforms like Telegram and compensated through cryptocurrencies. This layered approach allows professional GRU officers to remain insulated from direct involvement, complicating attribution and prosecution. The Leipzig-Halle Airport incident, which targeted a Ukrainian cargo aircraft transporting materials, was publicly attributed to Russia by the German government.

The discovery of Slovakia as a hub for GRU operations raises concerns about the broader implications for European security. German authorities are collaborating with Slovak counterparts to determine the full scope of the network’s activities. These findings highlight the evolving tactics of Russian intelligence in targeting critical infrastructure and defense-related entities, particularly those supporting Ukraine. The case underscores the need for heightened vigilance and international cooperation to counter such threats.