Europe is facing an escalating wave of Russian hybrid warfare, recording 151 covert incidents—including sabotage, arson, and armed drone incursions—since February 2022. Intelligence officials warn that the Kremlin is systematically testing Western readiness for a prolonged standoff without triggering direct military intervention.
The geopolitical landscape across Europe is growing increasingly tense as the continent prepares for what officials warn will be its fifth winter of hybrid conflict. According to comprehensive figures released by the Center for Countering Disinformation, European authorities have documented exactly 151 hybrid attacks linked to Russia between February 2022 and February 2026. The pace of these operations has quickened noticeably, with investigators identifying 41 additional incidents during a single monitoring period stretching from the summer of 2025 to February 2026.
This coordinated campaign of sub-threshold hostility bypasses conventional military boundaries. Rather than open warfare, Moscow is relying on a mix of cyberattacks, covert political influence, infrastructure mapping, and physical sabotage. Intelligence assessments from the Netherlands emphasize that while a direct military clash between Russia and NATO remains an unlikely outcome, it is no longer unthinkable
as the Kremlin steadily expands and reforms its armed forces.
Dissecting the 151 Documented Incidents Across Europe
Geographically, these clandestine operations have cast a wide net across the continent, concentrating heavily on nations providing the most active support to Ukraine.
The tactics deployed in these attacks demonstrate a calculated shift toward kinetic and physical disruption. Throughout recent weeks, major airports in Norway and Denmark were forced to suspend operations due to suspicious drone activity. Denmark’s Prime Minister Mette Frederiksen noted that Russian involvement in these sophisticated drone disruptions cannot be ruled out.
Meanwhile, an explosive-laden drone discovered at an airport in Leipzig near a Ukrainian cargo plane prompted German Chancellor Friedrich Merz to declare on August 25 that those responsible for hybrid attacks will pay the price.
Intelligence services point out that perpetrators carrying out these arson, vandalism, and bombing attempts are often recruited online via social media or drawn from criminal backgrounds. This structural separation preserves plausible deniability for Moscow while leaving European security forces scrambling to investigate fragmented networks.
Deterrence Failures and the Structural Debate Over Western Response
Despite the accumulating physical damage and rising risk tolerance within the Kremlin—which has shown an increased willingness to accept casualties and operational exposure since 2024—European institutions have struggled to formulate an effective counter-strategy. Analysts argue that the current architecture of Western defense remains fundamentally unequipped to deter sub-threshold provocations.
Grigas added that Western responses have focused on detecting and countering individual provocations, but have not built a record of effective deterrence by consistently dissuading Moscow from continuing or escalating them.
This defensive posture leaves individual member states vulnerable to probing actions designed to fracture alliance unity and erode public trust.
Strategic Adaptations and Lessons From Ukraine’s Front Lines
Simultaneously, prediction markets monitoring conflict trajectories reflect the broader geopolitical volatility, pricing the probability of Russian forces entering Sloviansk by December 31, 2026, at 25%. Whether European capitals can move beyond reactive defense before further kinetic incidents occur remains the central security question facing the continent.
