Russian Espionage Evolves From Elite Spies To Gig Operatives

In place of declared“diplomats” well known to local counterintelligence officers, operations have been outsourced to disposable proxies recruited for a pittance. These people are often unaware of who their handlers are or their mission's real goals.

This new campaign brings to life former CIA chief James Woolsey's 1993 description of the post-Cold War security landscape as a“jungle of venomous snakes.”

Recruited on messaging apps and paid in cryptocurrency, gig-economy operatives have been tasked with arson and other property damage, beatings, kidnappings and assassinations. This includes assassination plots on US soil in a stark breach of Cold War conventions.

While many of these plots have been amateurish, the intent behind them and their potential damage is real. Blurring the lines between theatrics and physical damage, the campaigns have included mock coffins placed beneath the Eiffel Tower and graffiti designed to stoke antisemitic tensions across Paris.

Arson targets have ranged from a warehouse in London storing aid for Ukraine to an Ikea store in Lithuania and a paint factory in Poland. Western intelligence also narrowly averted catastrophe in 2025 when incendiary devices planted on DHL cargo planes caught fire in freight depots on the ground rather than mid-flight.

Beyond commercial property, Moscow's campaign has targeted critical infrastructure. At sea, the playbook has escalated from plausible deniability to overt military posturing. Since 2023, Russian-linked commercial vessels flagged from China to the Cook Islands have repeatedly severed power and data cables by dragging their anchors across the seabed.

The Russian authorities have backed this with hard power. This has ranged from scrambling fighter jets to deter Estonian authorities from approaching a suspected vessel in 2025, to deploying intelligence ships and submarines close to western lines.

A parallel escalation has unfolded in the air. Operations began with electronic interference and drone surveillance disrupting commercial aviation, as well as probing European military bases and transport hubs to test air defenses and map blind spots and vulnerabilities.

They have since graduated to overt airspace violations by Russian military aircraft and missiles, while armed drones have repeatedly crashed or detonated in Polish, Latvian and Moldovan territory.

This pattern crossed from deniable sabotage into a direct physical attack in August 2026 when an explosives-laden drone crashed into the wing of a parked Ukrainian cargo plane at Leipzig/Halle Airport in Germany. The device failed to detonate, averting a major explosion on an aircraft that had previously transported military ammunition.

The incident exposed not only Moscow's escalatory ambitions, but also the sharp decline in professionalism within Russian intelligence. Rather than the elite officers Cold War doctrine called for, the Russian intelligence handler relied on amateur recruits, who botched the job.

Yet for Moscow, operational failures are almost as useful as successes. A botched strike still generates media panic, exhausts European security services and projects a menacing shadow far beyond Russia's real capabilities.