Lyce · Hybrid Watch

hw_5d24da74f5177426

Lithuanian authorities foil a Russian-linked plot involving planned murders.

Lithuanian law-enforcement authorities announced that they had prevented planned murders and terrorist attacks following a large-scale international investigation involving domestic and foreign partners. The case originated in early 2025 after a Russian citizen living in Lithuania reported discovering a tracking device placed in his car, which triggered a broader counter-intelligence investigation. Investigators uncovered a complex transnational network engaged in surveillance, recruitment, financing and preparation for violent acts, including the planned killing of at least two individuals. The identified targets were reportedly selected due to their political views and activities, indicating a politically motivated dimension to the operation. Authorities established that multiple foreign nationals — including individuals from Russia and other countries — were involved in collecting intelligence on the victims using technical surveillance methods. The investigation also revealed that suspects planned additional terrorist actions, including gathering information on military infrastructure and involvement in attempts to damage equipment intended for support to Ukraine. Operational coordination involved organized criminal elements, which provided logistical support such as access routes, equipment acquisition and escape planning. In March 2025 key suspects were arrested in Vilnius, followed by further detentions during a coordinated international police operation in early 2026 across several countries. In total, 13 individuals were identified, with multiple arrests and European arrest warrants issued for suspects located abroad. Investigators established direct links between the perpetrators and coordinators acting in the interests of Russian military intelligence (GRU). Although no attacks were ultimately carried out, the operation demonstrated an advanced stage of preparation involving surveillance, recruitment and operational planning. The case illustrates how hybrid warfare increasingly involves covert networks conducting reconnaissance and preparing violent acts within EU/NATO states.

Occurrence
2026-04-27
Publication
2026-04-27T08:34:14Z
First observed
2026-09-24T06:09:10.079Z
Review status
Not assessed
Countries
LT
Updated
2026-09-27T23:56:59.668Z

E/M/R/S scores

  • EExistence0/4 · Not assessed
  • MIntent0/4 · Not assessed
  • RRussian actor link0/4 · Not assessed
  • SRussian state responsibility0/4 · Not assessed

Facts

No facts

Sources

  1. Role
    discovery_lead
    Date
    2026-04-27T08:34:14Z

    Lithuanian law-enforcement authorities announced that they had prevented planned murders and terrorist attacks following a large-scale international investigation involving domestic and foreign partners. The case originated in early 2025 after a Russian citizen living in Lithuania reported discovering a tracking device placed in his car, which triggered a broader counter-intelligence investigation. Investigators uncovered a complex transnational network engaged in surveillance, recruitment, financing and preparation for violent acts, including the planned killing of at least two individuals. The identified targets were reportedly selected due to their political views and activities, indicating a politically motivated dimension to the operation. Authorities established that multiple foreign nationals — including individuals from Russia and other countries — were involved in collecting intelligence on the victims using technical surveillance methods. The investigation also revealed that suspects planned additional terrorist actions, including gathering information on military infrastructure and involvement in attempts to damage equipment intended for support to Ukraine. Operational coordination involved organized criminal elements, which provided logistical support such as access routes, equipment acquisition and escape planning. In March 2025 key suspects were arrested in Vilnius, followed by further detentions during a coordinated international police operation in early 2026 across several countries. In total, 13 individuals were identified, with multiple arrests and European arrest warrants issued for suspects located abroad. Investigators established direct links between the perpetrators and coordinators acting in the interests of Russian military intelligence (GRU). Although no attacks were ultimately carried out, the operation demonstrated an advanced stage of preparation involving surveillance, recruitment and operational planning. The case illustrates how hybrid warfare increasingly involves covert networks conducting reconnaissance and preparing violent acts within EU/NATO states.