Russia · 23 August, 2026 · 2 min read
Russia Sabotages European Weapons Factories, Using Criminal Groups to Avoid NATO Article 5
Russia conducts new sabotage attacks on European defense factories supplying Ukraine Intelligence sources allege Moscow recruits local criminal networks to carry out operations
How confident outlets are about Russia's direct involvement.
5 of 6 outlets skipped it: kyiv expects EU funding of 30 billion euros for defence..
6outlets compared
Same story, two versions
tap a side to read it in full
Al-Jazeera Net
“investigations have not pointed to direct evidence of Russian involvement so far.”
Translated from the original.
Read the original ↗The Telegraph
“The Kremlin is recruiting local gang members to sabotage defence manufacturers to test Nato’s resolve.”Read the original ↗
Al Jazeera flags lack of direct evidence; Telegraph frames Kremlin as orchestrator.
Sabotage, Article 5 test
Western intelligence sources cited by The Telegraph say Russia has launched a new wave of sabotage against European weapons factories by recruiting members of local criminal groups to keep attacks below the threshold that would trigger NATO’s mutual defense clause under Article 5.T
“carefully calculated to fall just short of triggering Article 5”
The Telegraph reports that Latvia detained three of its citizens on suspicion of setting fire to a drone manufacturer in neighboring Estonia, with a building belonging to Tallinn-based Milrem Robotics set on fire on the night of August 15.T
The Telegraph also links the Milrem arson to a broader pattern of suspected or confirmed sabotage targeting military supply chains supporting Ukraine across NATO territory.
RBC-Ukraine, citing The Telegraph, says the operations were “deliberately organized to remain below the threshold that would trigger a collective NATO response under Article 5” while Moscow could test the Alliance’s reaction.T
How Russia recruits
Normunds Mežviets, head of Latvia’s State Security Service, is quoted in The Telegraph saying, “In our experience, we don’t see GRU officers travelling here physically to our country.”T
The Telegraph adds that GRU officers “stay in Russia where it’s safe” and cultivate contacts within criminal gangs to act as intermediaries, using messaging apps such as Telegram.T
RBC-Ukraine says the GRU now favors remote recruitment of criminals or local intermediaries, particularly via Telegram, and that perpetrators “may therefore be unaware that they are indirectly working for Moscow.”
The Telegraph’s account also frames the covert nature of the attacks as a deliberate attempt to sow discord among allies, with Eastern member states such as Poland and the Baltic countries “much more vocal about Russian aggression” than countries farther west like Italy and Germany.T
Escalation risk for NATO
NATO Secretary-General Mark Rutte is quoted in vijesti.me describing sabotage operations attributed to Moscow as “dangerous and irresponsible,” calling on the Alliance to be ready to respond in a “clear, swift and decisive” manner.
“dangerous and irresponsible”
The Telegraph says Russia’s “hybrid war” is aimed at escalating tensions between Nato’s allies and deterring support for Ukraine, and it ties the strategy to a steady stream of unexplained attacks across Europe since Vladimir Putin’s invasion of Ukraine in February 2022.T
The Telegraph reports that explosions have occurred at major arms manufacturers in Italy and Bulgaria this month alone, and it also cites earlier incidents including a fire that almost destroyed a Czech plant making drones and thermal optics for Ukraine with four suspects detained.T
The stakes are framed in The Telegraph as a test of how far Moscow can go without provoking a NATO response, while the same article says Russia very rarely leaves evidence that would allow the attacks to be directly attributed to Moscow.T