Lyce · Hybrid Watch
hw_6cada5003a884738
Germany arrests three Ukrainian nationals suspected of preparing Russian-linked parcel sabotage against freight transports.
German federal prosecutors announced the arrests of three Ukrainian nationals — Vladyslav T., Daniil B., and Yevhen B. — on suspicion of intelligence activities for sabotage purposes. Vladyslav T. was arrested in Cologne on 9 May 2025, Daniil B. was arrested in Konstanz on 10 May, and Yevhen B. was arrested in Canton Thurgau, Switzerland, on 13 May. German arrest warrants accused the men of preparing sabotage activities and of declaring themselves willing to commit aggravated arson and cause an explosion. According to the Federal Public Prosecutor General, by late March 2025 the suspects had allegedly agreed with one or more individuals “supposedly acting on behalf of Russian authorities” to conduct incendiary and explosive attacks against freight transports in Germany. The alleged method was to send parcels equipped with explosive and incendiary devices designed to ignite during shipment, with recipients in Ukraine. To map transport routes, Vladyslav T. allegedly sent two test parcels containing GPS tracking devices in late March 2025. This is a strong hybrid-warfare case because the suspected operation targeted the logistics chain, not a battlefield target. Freight networks are strategically important because they support civilian commerce, military supply movement, and Ukraine-related transport flows across Europe. The use of parcel shipments also makes the case especially relevant: it exploits ordinary commercial delivery systems as a covert attack vector. Such a method creates ambiguity, delays detection, and can spread security pressure across multiple transport nodes without requiring a visible Russian operative on site. It is not a completed attack, because the case concerns alleged preparation and arrests before execution.
Attribution
Official
Facts
No facts
Sources
-
- Role
- Discovery lead
- Publication
German federal prosecutors announced the arrests of three Ukrainian nationals — Vladyslav T., Daniil B., and Yevhen B. — on suspicion of intelligence activities for sabotage purposes. Vladyslav T. was arrested in Cologne on 9 May 2025, Daniil B. was arrested in Konstanz on 10 May, and Yevhen B. was arrested in Canton Thurgau, Switzerland, on 13 May. German arrest warrants accused the men of preparing sabotage activities and of declaring themselves willing to commit aggravated arson and cause an explosion. According to the Federal Public Prosecutor General, by late March 2025 the suspects had allegedly agreed with one or more individuals “supposedly acting on behalf of Russian authorities” to conduct incendiary and explosive attacks against freight transports in Germany. The alleged method was to send parcels equipped with explosive and incendiary devices designed to ignite during shipment, with recipients in Ukraine. To map transport routes, Vladyslav T. allegedly sent two test parcels containing GPS tracking devices in late March 2025. This is a strong hybrid-warfare case because the suspected operation targeted the logistics chain, not a battlefield target. Freight networks are strategically important because they support civilian commerce, military supply movement, and Ukraine-related transport flows across Europe. The use of parcel shipments also makes the case especially relevant: it exploits ordinary commercial delivery systems as a covert attack vector. Such a method creates ambiguity, delays detection, and can spread security pressure across multiple transport nodes without requiring a visible Russian operative on site. It is not a completed attack, because the case concerns alleged preparation and arrests before execution.
-
- Role
- Discovery lead
- Publication
German federal prosecutors announced that three Ukrainian nationals were arrested for their suspected involvement in a plot to send explosive or incendiary parcels from Germany to Ukraine, ostensibly under the direction of individuals affiliated with Russian state institutions. Two of the men — identified in line with German privacy laws as Vladyslav T. and Daniil B. — were arrested in Germany, while a third suspect, Yevhen B., was detained in Switzerland and is to be extradited. Prosecutors revealed that at least two test parcels containing GPS trackers were mailed from Cologne in late March to scout possible transport routes for later explosive devices. The parcels were planned to detonate during transit, targeting freight transport systems, thereby placing Germany’s logistic and supply-chain infrastructure at risk. The incident demonstrates that Germany’s internal logistics networks and freight-transport nodes are being targeted by hybrid-warfare operations — not just border or “front-line” military regions. The dynamics reflect a Russian-style hybrid-warfare tactic: covert recruitment of third-country nationals, use of civilian logistics/proxy routes, non-kinetic entry (parcels) to impose cost and uncertainty rather than overt military action. German Justice Minister Stefanie Hubig stated that Russia is attempting to destabilize Western democracies via sabotage and intelligence methods.