Daily Junction.mobi portalBusiness · October 25, 2026 · The Conversation · 5 min
Across domains, Russia has turned unpredictability and disruption into its strategic weapon of choice.
<div class="theconversation-article-body"> <figure> <img alt="A Russian military operative analyses surveillance data on a laptop." src="https://images.theconversation.com/files/766564/original/file-20261015-50-ywoq0f.jpg?ixlib=rb-4.1.1&rect=0%2C551%2C5279%2C2969&q=45&auto=format&w=754&fit=clip" /> <figcaption> Russia has traded highly trained operatives for cheap technology and expendable recruits. <span class="attribution"><a class="source" href="https://www.shutterstock.com/image-photo/russian-military-operative-uses-laptop-analyze-2535331177?trackingId=39eeaa8b-8ec0-4e85-a84c-79f0f023fd0b&listId=searchResults">DC Studio / Shutterstock</a></span> </figcaption> </figure>
<span><a href="https://theconversation.com/profiles/elena-grossfeld-2771217">Elena Grossfeld</a>, <em><a href="https://theconversation.com/institutions/kings-college-london-1196">King's College London</a></em>; <em><a href="https://theconversation.com/institutions/swedish-defence-university-2739">Swedish Defence University</a></em></span>
<p>Russian hostile activity costs the UK at least £2 billion annually, according to a recent <a href="https://graemedownie.com/wp-content/uploads/2026/10/PUTIN-TAX-FINAL-COMPLETED.pdf">report</a> by Scottish MP Graeme Downie, who has called on the government to measure what these actions cost Britain. But this figure is just the baseline. In reality, a profound shift in Moscow’s approach to sabotage means the true cost is set to climb higher. </p>
<p>While <a href="https://theconversation.com/topics/russia-1376">Russia</a> still draws on its cold war target lists, ranging from critical transit nodes and military sites; to energy and communication infrastructure; it has traded highly trained operatives for cheap technology and expendable recruits. The switch to a <a href="https://www.cna.org/analyses/2025/05/quantity-has-a-quality-all-of-its-own">quantity-over-quality</a> model presents a much more volatile threat.</p>
<p>This model borrows from the logic of distributed computing. It uses networks of cheap, unreliable parts where individual breakdowns are expected yet the overall system still gets the job done.</p>
<p>By generating a <a href="https://sahasec.org/tracker/">high volume</a> of low-cost operations that often fail at the individual level, Moscow still achieves its objectives of causing outsized psychological disruption and steadily exhausting western security services. </p>
<figure> <iframe width="440" height="260" src="https://www.youtube.com/embed/wksAaoch8vw?wmode=transparent&start=0" frameborder="0" allowfullscreen=""></iframe> <figcaption><span class="caption">A 2024 arson attack on a London warehouse is one of a number of sabotage attempts European authorities believe Russia has ordered in recent years.</span></figcaption> </figure>
<p>This operational transformation surged after Russia’s full-scale invasion of Ukraine in 2022. Within months, over 400 Russian intelligence officers operating under diplomatic cover <a href="https://www.theguardian.com/uk-news/2022/jul/21/half-of-russian-spies-in-europe-expelled-since-ukraine-invasion-says-mi6-chief">were expelled across</a> Europe. This number has since climbed to <a href="https://szru.gov.ua/en/news-media/news/700-expelled-diplomats-and-130-new-cases--europe-responds-to-moscows-espionage-expansion">more than 700</a>. </p>
<p>The mass purge was expected to cripple Russia’s spy networks. But it instead accelerated Moscow’s pivot towards what <a href="https://www.tandfonline.com/doi/abs/10.1080/03071847.2024.2401232">research</a> I carried out with colleagues in 2024 defined as “gig-economy” operatives. </p>
<p>In place of declared “diplomats” well known to local counterintelligence officers, operations have been outsourced to disposable proxies recruited for a pittance. These people are often unaware of who their handlers are or their mission’s real goals. </p>
<p>This new campaign brings to life former CIA chief James Woolsey’s 1993 <a href="https://www.nytimes.com/1993/02/03/us/cia-nominee-wary-of-budget-cuts.html">description</a> of the post-cold war security landscape as a “jungle of venomous snakes”.</p>
<h2>Gig-economy operatives</h2>
<p>Recruited on messaging apps and paid in cryptocurrency, gig-economy operatives have been tasked with arson and other property damage, <a href="https://www.bbc.com/news/world-europe-68854314">beatings</a>, <a href="https://www.theguardian.com/world/2025/mar/10/they-came-across-as-muppets-christo-grozev-on-being-target-of-bulgarian-spy-ring">kidnappings</a> and <a href="https://www.theguardian.com/world/2026/aug/13/russian-plot-kill-ukrainian-american-thwarted-poland-says-polish-pm">assassinations</a>. This includes assassination plots <a href="https://www.justice.gov/opa/pr/members-russian-intelligence-services-network-charged-conspiring-finance-terrorism-and">on US soil</a> in a stark breach of cold war conventions. </p>
<p>While many of these plots have been amateurish, the intent behind them and their potential damage is real. Blurring the lines between theatrics and physical damage, the campaigns have included <a href="https://www.bbc.com/news/articles/cldd7n97dvro">mock coffins</a> placed beneath the Eiffel Tower and graffiti designed to <a href="https://www.france24.com/en/live-news/20251029-france-tries-bulgarians-over-defacing-memorial-in-russia-linked-case">stoke antisemitic tensions</a> across Paris. </p>
<p>Arson targets have ranged from a <a href="https://www.bbc.com/news/articles/c04g5x1wq5vo">warehouse</a> in London storing aid for Ukraine to an <a href="https://www.theguardian.com/world/article/2024/may/20/poland-arrests-nine-suspects-over-alleged-russian-sabotage-plot">Ikea</a> store in Lithuania and a paint factory in Poland. Western intelligence also narrowly averted catastrophe in 2025 when incendiary devices <a href="https://www.bbc.com/news/articles/cpd83zwqlvno">planted</a> on DHL cargo planes caught fire in freight depots on the <a href="https://www.dw.com/en/russia-linked-group-planned-parcel-bomb-attacks-in-europe/a-74033597">ground</a> rather than mid-flight. </p>
<p>Beyond commercial property, Moscow’s campaign has targeted critical infrastructure. At sea, the playbook has escalated from plausible deniability to overt military posturing. Since 2023, Russian-linked commercial vessels flagged from China to the Cook Islands <a href="https://www.wilsoncenter.org/article/mapping-undersea-infrastructure-attacks-baltic-sea">have repeatedly severed</a> power and data cables by dragging their anchors across the seabed. </p>
<p>The Russian authorities have backed this with hard power. This has ranged from <a href="https://warontherocks.com/deterring-russia-beneath-the-waves-securing-natos-critical-undersea-infrastructure/">scrambling fighter jets</a> to deter Estonian authorities from approaching a suspected vessel in 2025, to deploying intelligence ships and submarines close to western lines.</p>
<p>A parallel escalation has unfolded in the air. Operations began with <a href="https://www.aa.com.tr/en/europe/report-says-russian-gps-jamming-disrupted-123-000-flights-over-baltic-airspace/3680588">electronic interference</a> and drone <a href="https://natoassociation.ca/russian-drones-in-europe-new-tools-of-hybrid-warfare/">surveillance</a> disrupting commercial aviation, as well as probing European military bases and transport hubs to test air defences and map blind spots and vulnerabilities. </p>
<p>They have since graduated to <a href="https://www.bbc.co.uk/news/articles/c699d2dn9z0mo">overt airspace violations</a> by Russian military aircraft and missiles, while armed drones <a href="https://www.rferl.org/a/moldova-russia-ukraine-war-drones-missiles-cross-fire-/33872784.html">have repeatedly crashed</a> or detonated in <a href="https://militarnyi.com/en/news/poland-keeps-locations-of-three-russian-drone-crashes-in-2025-secret/">Polish</a>, Latvian and Moldovan territory. </p>
<p>This pattern crossed from deniable sabotage into a <a href="https://www.bbc.com/news/articles/c5ylm3m67n2o">direct physical attack</a> in August 2026 when an explosives-laden drone crashed into the wing of a parked Ukrainian cargo plane at Leipzig/Halle Airport in Germany. The device failed to detonate, averting a major explosion on an aircraft that had previously transported military ammunition. </p>
<p>The incident exposed not only Moscow’s escalatory ambitions, but also the sharp decline in professionalism within Russian intelligence. Rather than the elite officers cold war doctrine called for, the Russian intelligence handler relied on amateur <a href="https://theins.press/en/inv/298011">recruits</a>, who botched the job. </p>
<p>Yet for Moscow, operational failures are almost as useful as successes. A botched strike still generates media panic, exhausts European security services and projects a menacing shadow far beyond Russia’s real capabilities. </p>
<h2>Moscow’s cyber campaigns</h2>
<p>The same logic underpins the Kremlin’s cyber campaigns, where merely threatening critical infrastructure is often enough to achieve intimidation. Cyberattacks on a Norwegian <a href="https://www.theguardian.com/world/2025/aug/14/russian-hackers-control-norwegian-dam-norway">dam</a> and a Swedish <a href="https://www.sverigesradio.se/artikel/civil-defence-minister-sweden-foiled-pro-russian-cyber-attack-on-heating-plant">heating</a> plant, both in 2025, caused negligible physical damage. But they generated alarming headlines and have had psychological effects.</p>
<p>Also in 2025, a cyberattack on a major Polish power and heating plant <a href="https://apnews.com/article/poland-cyberattacks-2025-energy-system-russia-57ebc6e1c67654586c21f0936faa47d1">threatened to cut</a> heat to half a million people during winter. Even though blackouts were avoided, the destructive potential was impossible to ignore.</p>
![[View image]](/img/tc-from-elite-spies-to-gig-economy-operatives-the-changing-face-of-russian-sabotage.jpg){kind=link}