AI-generated symbolic illustration of state-directed sabotage and online proxy recruitment; it does not depict a specific incident or person.
Denmark's national security service says Moscow has crossed a line it spent the spring approaching.
PET lead analyst Josefine Christensen told a Copenhagen homeland-security conference that Russia moved from substantial planning in the spring to carrying out many more sabotage operations in early summer. The targets are narrowing, too. Instead of broad disruption that failed to dent NATO support, she said, Russia is going after companies whose work can affect the Ukrainian front line, including weapons production.[1][5]
The recruiting model is pure institutional cowardice with an app-store gloss. PET says Russian services increasingly use untrained proxies found through Telegram and other social platforms. A small paid task may begin with a photograph or a little reconnaissance. Then the request escalates. If one disposable recruit fails, another can be hired.[1][3][5][6]
What is established
Reuters attributes the new assessment to PET analyst Josefine Christensen. Moscow has repeatedly denied involvement in sabotage or hybrid-warfare operations. PET’s public website describes a growing Russian sabotage threat, but its undated detailed page still says it knows of no specific instances of Russian physical sabotage in Denmark. The new operational claim rests on Christensen’s reported remarks.[1][2][4][5]
What follows from it
The inference is not that every unexplained fire or broken machine in Europe is a Kremlin operation. It is that the cost structure of sabotage has changed. A state can retain political control, outsource the dangerous work to people recruited online and burn through failed proxies almost as cheaply as it burns through fake accounts.
When the weapons keep moving, attack the people and factories making them. When professional operatives are expensive, shop for amateurs. Hybrid warfare now has a gig-economy labor pool, and the platform's best feature is deniability.
CORRECTIONS & UPDATES.
Correction · Sourcing clarification, October 7, 2026: The specific operational assessment is attributed to remarks reported by Reuters. PET’s undated public background page has different wording and does not independently confirm those reported operations.
FOLLOW THE SOURCES.
Checked Oct 7, 2026. Numbered references point to the evidence behind factual passages. Commentary is our own.
Trump announced an immediate energy truce. Zelenskyy said the announcement was news to him. Viddy the gap between a presidential post and a working agreement.
Three Yandex data centers have been knocked offline in days. The newest hit fully shut the Vladimir site, while the first targeted hub houses two of the company's three AI-training supercomputers.