The front line is no longer just in eastern Ukraine. A new front line, one of sabotage and clandestine operations, now involves German army depots, Polish railways, and ports across Europe. This new front line, almost officially assumed by Russia, was recently highlighted following an act of sabotage that took place in Germany.
The flames that destroyed at least six German military trucks in a unit of Bundeswehr in Erfurt on the night of June 26 did not just destroy military equipment, but confirmed an uncomfortable yet increasingly obvious reality: the shadow war that the Kremlin's intelligence agencies are waging against NATO is not being fought behind closed doors. It is now out in the open and acknowledged.
The attack, claimed almost immediately by a pro-Russian Telegram channel, was predictably presented as an act of sabotage directed against military equipment destined for Ukraine.
However, Russia's propaganda was clumsy and quickly dismantled by the OSINT analyst community on X/Telegram. The burned vehicles, Rheinmetall MAN models, bore clear Bundeswehr military markings—the iron cross and German registration numbers. These were not Ukrainian trucks undergoing repairs, but German army assets located directly on German territory, according to the Ukrainian publication. United24Media.
This is not simply a case of arson. It is a flagrant violation of the security of a NATO military facility. The trucks most likely belonged to the Bundeswehr Strategic Logistics Command, whose headquarters are located in the German city of Erfurt. Entering such an area and starting a fire of this magnitude suggests a level of planning and audacity that goes far beyond ordinary vandalism. It points to a sabotage operation carried out by foreign intelligence services.
This incident is not an isolated case. It is only the latest episode in a series of attacks that Russia is orchestrating across the European continent, calling on a series of proxy agents via Telegram.
A civilian messaging app has unexpectedly become one of the most critical components of the Kremlin's war machine. Telegram is not just a propaganda tool, but has evolved into a de facto command and control system for Russian forces, a platform for recruiting spies on NATO territory and a vital mechanism for participatory financing of aggression. At the same time, for Ukraine, it is an indispensable source of information and a major security risk, illustrating the dual nature that technology takes on in the context of modern hybrid warfare.
A recent investigation by Novaya Gazeta Europe has uncovered a network of pro-war channels on Telegram that actively urge Russian-speaking residents in Europe to spy on NATO military targets. Through a specialized bot, recruits are asked to photograph convoys and military bases, acquire detailed maps and local SIM cards to send to Russia. The main focus, according to the bot operator who claims to be part of the Russian Airborne Forces, is on troop movements on the border with Belarus, military equipment storage locations, and training centers for Ukrainian soldiers.
Behind this recruitment network is Ksenia Temnik, head of the legal department of the military enlistment office in occupied Crimea. Temnik, a prominent figure in the occupation administration, confirmed to an undercover journalist that the bot is operated by “our guys” in the army. This digital espionage campaign is not just theoretical. It correlates directly with a series of real-life acts of sabotage: arrests in Estonia for desecrating monuments, accusations in Latvia of spying on a NATO base, the arrest in Germany of agents planning to set fire to industrial and military sites, and the dismantling in Poland of a network that intended to sabotage trains carrying aid to Ukraine. Telegram has become the preferred channel for Russian intelligence agencies to orchestrate these operations from afar.
The act of sabotage at the Bundeswehr base in Erfurt on the night of June 26 is not an isolated incident.
In May 2025, German authorities arrested three Ukrainian citizens suspected of acting as “foreign agents” for Russia. Their mission? To place incendiary devices in freight shipments destined for Ukraine.
In October 2024, Thomas Haldenwang, head of Germany's domestic intelligence service, indicated that Russian sabotage was the probable cause of a fire on a cargo plane at Leipzig Airport.
The pattern followed by Russian intelligence services is clear and extends beyond Germany. From attempts to set fire to warehouses in Poland and the UK to cyberattacks on railway networks in the Czech Republic, the Kremlin is pursuing a strategy of constant harassment in all areas against states that support Ukraine. In other words, every destroyed truck, every delayed shipment, every slowed-down arms factory is a direct blow to Ukraine's ability to defend itself.
Russia cannot afford a conventional war with NATO, but it can wage a war of attrition on Alliance territory. It is a hybrid war waged with matches, explosive packages, and proxy agents recruited through messaging apps such as Telegram—as is suspected in the case of Ukrainian citizen Roman Lavrynovych, who was charged in May with arson in the United Kingdom.
The Russian intelligence services have a twofold objective. On the one hand, it is purely military: to disrupt and hamper the vital logistics chain that keeps the Ukrainian army fighting. Every logistics vehicle destroyed means fewer shells, fewer spare parts, and fewer supplies reaching the front lines in Donbas.
On the other hand, the objective is psychological and political. The Kremlin wants to demonstrate that support for Ukraine has a direct and dangerous cost for NATO countries. It wants to instill fear, create internal political pressure, and undermine the determination of European leaders, hoping that they will eventually give in.
So far, NATO's response has been swift – arrests, investigations, warnings. But the fire in Erfurt raises the stakes for NATO countries. We are no longer talking about sabotaging aid to Ukraine, but about the direct destruction of military property belonging to a NATO member state, inside a military base.
The question is no longer whether Russia is waging a hybrid war against NATO, but how visible this war will become before the Alliance formulates an adequate response.
—
By , Cristian Soare, military analyst and expert Digital Forensic Team
