NextFin News - Russia has fundamentally altered its tactical approach to hybrid warfare in Europe, transitioning from the use of "disposable" amateur recruits to highly trained professional sabotage cells embedded within organized crime networks. A report released Wednesday by Poland’s Internal Security Agency (ABW) reveals that Moscow is now prioritizing "complex sabotage cells" composed of individuals with backgrounds in law enforcement, the military, or the Wagner Group. This shift marks a dangerous escalation in the Kremlin’s efforts to destabilize the West, moving beyond low-cost vandalism toward high-impact operations that Polish officials warn are designed with the explicit acceptance of potential fatalities.
The scale of this intelligence surge is reflected in the sheer volume of counter-espionage activity. According to the ABW, Poland has initiated 69 espionage investigations in 2024 and 2025 alone—a figure that matches the total number of such cases recorded between 1991 and 2023. This surge in activity follows a period where Russian intelligence relied heavily on "one-time agents" recruited via social media and Telegram, often individuals with no ideological ties to Moscow who were paid small sums to photograph critical infrastructure or commit minor acts of arson. The new professionalized model leverages the "closed structures of organized crime," making these cells significantly harder to penetrate and more capable of executing sophisticated kinetic attacks.
The strategic pivot appears to be a direct response to the mass expulsion of Russian intelligence officers from European capitals following the 2022 invasion of Ukraine. Deprived of their traditional diplomatic cover, Russian services have spent the last two years rebuilding their operational capacity through non-traditional means. The ABW report notes that these new agents are often professionally trained on Russian soil before being deployed. The objective remains the long-term disintegration of Euro-Atlantic structures and the internal socio-political destabilization of specific NATO members, with Poland serving as a primary frontline target due to its role as the logistical hub for Western military aid to Ukraine.
Evidence of this "unprecedented" sabotage has already surfaced. In November 2025, explosions and malfunctions struck a critical railway line in Poland used for deliveries to Ukraine, an incident Prime Minister Donald Tusk characterized as a major security breach. While that specific attack resulted in no casualties, the ABW warns that the current professionalization of these cells suggests a higher tolerance for lethal outcomes in future operations. Beyond Russia, the report also identifies close cooperation between Moscow and Belarusian secret services, as well as peripheral activities linked to Chinese intelligence, suggesting a multi-front hybrid threat environment.
While the Polish government’s warnings are stark, some security analysts suggest that the public nature of the ABW report may also serve a domestic political purpose, justifying increased defense spending and stricter border controls. However, the data on arrests—62 individuals in the past two years—provides a concrete baseline for the heightened threat level. The transition from amateur "click-to-recruit" sabotage to professionalized crime-linked cells indicates that the "undeclared war" between Moscow and the West has entered a more volatile and technically proficient phase, where the line between criminal activity and state-sponsored terrorism continues to blur.
Explore more exclusive insights at nextfin.ai.
