WARSAW, Poland — Russian intelligence operations across Europe are evolving from amateur online recruits to sophisticated criminal networks, according to a new assessment from Poland’s Internal Security Agency released Wednesday.
The ABW intelligence service detailed how Moscow has transformed its sabotage strategy, moving beyond disposable agents recruited through internet platforms to establish what officials describe as “complex sabotage cells” embedded within organized crime structures.
This shift represents a significant escalation in what European authorities characterize as Russia’s hybrid warfare campaign against the continent, which encompasses arson, vandalism, and covert influence operations. Western officials have connected more than 150 such incidents to Moscow since Ukraine’s invasion began, according to Associated Press tracking.
Poland’s counterintelligence efforts have intensified dramatically, with the ABW conducting 69 espionage investigations during 2024 and 2025 alone — matching the total number pursued between 1991 and 2023. This surge has resulted in 62 arrests over the past two years.
“The long-term goal of the Russian Federation remains the disintegration of Euro-Atlantic structures, the isolation of specific countries and their internal socio-political and economic destabilization,” the intelligence report stated.
The ABW characterizes these activities as part of Russia’s “undeclared war with the Western world,” noting that “Russian intelligence is increasingly using methods typical of special forces (reconnaissance and sabotage).”
Initially, Russian services relied heavily on temporary operatives recruited randomly through online channels, particularly after Western European nations expelled Moscow’s intelligence officers following the 2022 Ukraine invasion. However, the current approach emphasizes recruiting experienced personnel from law enforcement backgrounds.
“Russians prefer individuals with experience in law enforcement (e.g., former soldiers, police officers, mercenaries from the Wagner Group),” the assessment revealed.
The report also highlighted intensified training programs conducted within Russian territory, specifically designed for “professionally preparing agents for terrorist activities.”
While Russia primarily targets Poland, the ABW noted that Belarusian intelligence services, operating in “close cooperation” with Moscow, along with Chinese operatives, also conduct espionage activities in the country.
Polish authorities describe these extensive surveillance operations as groundwork for future sabotage acts, which they consider their “most serious challenge.” The report warns that Russian intelligence services are escalating their Polish operations while accepting the potential for “occurrence of fatalities.”
This assessment follows what Prime Minister Donald Tusk termed an “unprecedented act of sabotage” in November 2025, when explosions and equipment failures disrupted railway lines used for Ukrainian supply deliveries, affecting two trains including a passenger service. No injuries occurred in that incident.
