# European Intelligence Maps Four Russian Sabotage Networks as Serbia Seen as Possible Staging Hub

*Thursday, September 3, 2026 at 12:08 PM UTC — Hamer Intelligence Services Desk*

**Published**: 2026-09-03T12:08:56.589Z (44m ago)
**Category**: intelligence | **Region**: Europe
**Importance**: 8/10
**Sources**: OSINT
**Permalink**: https://hamerintel.com/data/articles/16719.md
**Source**: https://hamerintel.com/summaries

---

**Deck**: European intelligence services have identified four Russian‑controlled sabotage networks across EU territory, while Serbia has emerged as a possible link in a drone plot and as a suspected recruitment and training ground for Russian operatives.

European intelligence services have identified four Russian‑controlled sabotage networks operating across the European Union, according to reporting by German outlet Der Spiegel. The finding suggests Moscow has built multiple structures capable of attacks and disruption inside Europe.

The revelations come as investigators probe a foiled drone plot in Leipzig and an attack on a site linked to a German defense company. Serbia has emerged in these investigations as a possible link: one suspect in the Leipzig case reportedly traveled there after the incident, and Western intelligence services now view Serbia as a hotspot for Russian sabotage operations in Europe, where Russian services may recruit and train operatives.

In Munich, Molotov cocktails were thrown from a car at a construction site in front of the headquarters of German defense electronics firm Rohde & Schwarz. Two Bulgarian nationals were detained at a nearby gas station. Authorities have not publicly tied that specific incident to any of the four sabotage networks cited by Der Spiegel, but it fits a pattern of low‑level attacks and harassment around defense‑related infrastructure.

European officials have increasingly linked these kinds of activities to Russia’s diplomatic and intelligence presence. Polish Foreign Minister Radosław Sikorski has estimated that Russia has more than 2,000 diplomats across the EU, and claimed that at least 40% perform tasks “incompatible with diplomatic status” and operate agencies that carry out “terrorist activities” in European countries. Moscow denies that its diplomats engage in such operations.

Serbia’s role is particularly sensitive because it maintains close ties with Russia while also pursuing closer relations with the EU. If its territory is being used as a base or transit point for sabotage networks targeting EU states, European governments will have to weigh how far to press Belgrade and what additional security measures to adopt.

For people living and working near targeted facilities such as airports, industrial plants and defense sites, even small‑scale attacks with firebombs or drones carry immediate safety risks and can disrupt transport and production.

Key developments to watch include further disclosures from EU governments about identified networks or prosecutions, any moves to expel additional Russian diplomats, and Serbian responses to the suggestion that it is being used as a recruitment and training hub for operations in Europe.