Intelligence services from five European countries warn that Russia is expanding assassination and sabotage operations against defence manufacturers supplying Ukraine. The threats coincide with an alleged plot against Poland’s prime minister and defence minister, raising concerns about Moscow’s efforts to undermine European military assistance through intimidation and political destabilisation.

European intelligence agencies have warned that Russia is intensifying efforts to assassinate executives of defence companies supplying Ukraine, extending its campaign of sabotage and intimidation into the European military-industrial sector.

According to intelligence assessments obtained from five European security services, Moscow has ordered an expansion of covert operations targeting senior figures at major arms manufacturers and smaller companies producing drones and military components. Germany’s domestic intelligence agency, the BfV, has reportedly advised executives to strengthen personal security, while some manufacturers have already increased protection for senior personnel.

The warnings emerged alongside reports of an alleged assassination plot against Polish Prime Minister Donald Tusk and Defence Minister Władysław Kosiniak-Kamysz. Polish authorities convened an emergency security meeting and subsequently detained a suspect. No connection between the Polish case and Russian intelligence has been established.

Europe becomes Moscow’s principal target

The apparent expansion of Russian covert operations reflects a shift in Moscow’s calculations concerning Western military assistance.

President Vladimir Putin had reason to anticipate that Donald Trump’s return to the White House would weaken American support for Kyiv. Trump repeatedly questioned US military expenditure on Ukraine and advocated a negotiated settlement with Russia. A substantial reduction in American weapons deliveries could have increased pressure on Ukraine to accept Moscow’s territorial demands.

Instead, European governments assumed greater responsibility for sustaining Ukrainian defence capabilities, including financing weapons purchases and expanding domestic production.

The European Union’s €90 billion support programme for 2026–2027 allocates €60 billion to defence procurement and industrial capacity. The EU has also established mechanisms allowing Ukraine to participate in European joint procurement programmes.

Disrupting European manufacturers therefore offers Moscow a means of restricting Ukraine’s military capabilities without directly confronting NATO.

Assassination threats can interfere with procurement even when attacks are never carried out. Large manufacturers can afford extensive security arrangements, but smaller companies producing electronics, drone components and specialised equipment often lack comparable resources.

Intimidation could delay contracts, discourage investment and persuade individual suppliers to withdraw from Ukrainian defence programmes.

Sabotage as an instrument of political pressure

Russia’s alleged interest in targeting defence executives is not unprecedented. In 2024, American intelligence reportedly uncovered a Russian plot to assassinate Armin Papperger, chief executive of Rheinmetall, one of Germany’s principal suppliers of ammunition and military equipment to Ukraine.

As EU Today previously reported, Moscow has also publicly identified European factories involved in Ukrainian drone production, increasing concerns that civilian industrial facilities could become targets of Russian operations.

European authorities have investigated suspected Russian involvement in arson, infrastructure attacks and clandestine networks. An earlier cross-border investigation into alleged assassination and sabotage preparations demonstrated how intermediaries could be recruited to conduct operations while obscuring their sponsors.

Such activity also carries political consequences. Attacks against infrastructure and industrial facilities can reinforce public fears about confrontation with Russia, particularly during elections when parties advocating accommodation with Moscow seek to exploit security concerns.

Poland has already experienced mounting Russian hybrid pressure, including threats to critical infrastructure and information operations intended to aggravate domestic political divisions.

Putin’s strategy against European rearmament

Ukraine’s continuing strikes against Russian refineries and military-industrial facilities have added economic and operational pressures to Moscow’s prolonged war effort. Russia retains substantial military production capacity, but the costs of sustaining the conflict remain considerable.

Interfering with European weapons manufacturing could serve two objectives: restricting Ukraine’s access to equipment and obstructing Europe’s longer-term rearmament.

The Kremlin does not necessarily need European governments to abandon Ukraine formally. Production delays, disrupted contracts and reluctant suppliers could reduce the practical effect of military assistance even while political commitments remain unchanged.

European governments have acknowledged the industrial challenge. In its June conclusions on European defence, the European Council called for accelerated manufacturing capacity, stronger supply chains and closer cooperation with Ukraine’s defence industry.

Russia’s apparent strategy seeks to exploit the dependence of these programmes on private companies and skilled civilian personnel.

The warnings from European intelligence agencies suggest that protecting defence executives, engineers and contractors is becoming part of the continent’s wider security responsibilities.

For Moscow, intimidation offers the possibility of weakening Ukrainian military resistance without an open confrontation with NATO. For European governments, preventing covert operations from disrupting weapons production is increasingly inseparable from their commitment to sustain Ukraine’s defence.

Ukrainian forces have attacked one of Russia’s most important oil transport and blending facilities for the third time this month. The Samara hub handles crude from several major producing regions and plays a central role in preparing Russia’s Urals export blend, making it a target of considerably greater strategic significance than an ordinary oil depot.

Ukraine has intensified its campaign against Russia’s oil industry with another drone strike on the Samara linear production and dispatch station, a major facility in the pipeline network operated by state-controlled Transneft. The latest attack, during the night of 9–10 October, followed earlier strikes on 2 and 7 October, which Ukrainian military authorities say caused extensive damage to storage tanks and associated infrastructure.

The significance of Samara extends well beyond the destruction of stored oil. Situated near the settlement of Prosvet in Russia’s Samara region, the installation is a junction where crude oil arriving from Western Siberia, Tatarstan and the Volga-Urals producing regions is received, stored, blended and redistributed. Its role makes it an important link between Russian oil production, domestic refining and export markets.

According to the Ukrainian General Staff’s operational report, Samara is responsible for blending crude with different sulphur contents to produce Urals, Russia’s principal export grade. Ukraine’s military says the facility also contributes to supplying the Russian armed forces.

Why Samara matters to Russia’s oil exports

Unlike an oil refinery, where crude is processed into petrol, diesel and other fuels, the Samara installation performs a function earlier in the supply chain. It is one of the points where different grades of Russian crude are brought together to produce a commercially standardised export mixture.

Western Siberian crude generally has different characteristics from oil extracted in the Volga-Urals basin, including variations in sulphur content and density. Blending these streams is essential to maintaining the specifications of Urals crude, which is supplied to refineries and sold on international markets.

Samara’s importance also reflects the sheer scale of the infrastructure concentrated at the site. Ukrainian Special Operations Forces describe a facility where four major oil pipelines converge, supported by 71 storage tanks with a combined capacity exceeding 1.6 million cubic metres.

The site’s central role is not simply a Ukrainian assessment. Transneft-Privoĺga’s management previously described the Samara installation as having Europe’s largest oil storage tank farm and identified its blending station and associated pumping installations as part of a major modernisation programme.

Approximately 140 million tonnes of oil passes through the Samara complex annually. That figure would make the installation an important concentration point within the wider Russian pipeline system.

The consequences of sustained disruption could therefore extend beyond the immediate loss of storage capacity. Damage to blending operations, connecting pipelines or loading equipment could interfere with the movement of crude towards refineries and export routes. The precise effect would depend on the functioning of alternative facilities, available spare capacity and the speed of repairs.

Three attacks in nine days

The first strike, on 2 October, reportedly damaged 11 storage tanks with capacities of 20,000 cubic metres each, three larger tanks of 50,000 cubic metres, sections of pipeline and an automated loading station. The Security Service of Ukraine confirmed that its personnel had participated in the operation alongside other branches of the armed forces.

A further strike on 7 October destroyed four large storage tanks and caused a substantial fire, according to Ukraine’s General Staff. Ukrainian Special Operations Forces subsequently confirmed another attack on 10 October, although the damage from that operation remains under assessment. The reported destruction and damage have not been independently verified in full.

The repeated attacks indicate an effort to produce cumulative disruption rather than rely on a single operation to disable an extensive industrial complex.

This approach is consistent with Ukraine’s broader campaign against Russia’s refining industry. As EU Today examined in August, repeated strikes on processing facilities can create difficulties that extend beyond the immediate damage, particularly when specialist equipment requires lengthy repairs.

From refinery attacks to the wider oil network

The campaign against Samara represents a significant extension of that strategy. Refineries remain important targets because they produce the fuels required by Russia’s armed forces and domestic economy. Transport and blending facilities, however, determine whether crude reaches those refineries in the required quantities and specifications.

Continuous attacks are essential because much of the damage inflicted by drones is repairable. Individual installations may return to service within days or weeks, meaning the cumulative effect depends heavily on whether further disruption occurs before repairs and production have fully resumed.

Russia’s refining industry remains heavily dependent on specialist equipment and technologies historically supplied by Western manufacturers. Sanctions have restricted access to replacement components, while domestically manufactured equipment and Chinese alternatives are not always technically compatible with existing installations. These constraints complicate repairs, prolong shutdowns and limit Russia’s ability to restore damaged refining capacity.

Samara presents a somewhat different vulnerability. Its importance rests on the concentration of pipeline connections, storage and blending operations at one location. A sustained interruption could affect several parts of the oil supply chain simultaneously, although the available evidence does not yet establish that the wider network has suffered a prolonged shutdown.

Ukraine has already demonstrated its willingness to strike other logistical installations. A recent attack on the Volodarskaya petroleum-products station near Moscow targeted another important part of Russia’s fuel distribution system.

Implications for Russia’s war economy

Oil remains central to Russia’s export earnings and federal finances, while the availability of refined petroleum products influences military logistics, transport and industrial activity.

The immediate economic significance of the Samara attacks will depend on how much operational capacity has been lost, whether crude can be redirected through alternative infrastructure and how quickly Transneft can restore the damaged facilities.

There is an important distinction between destroying storage tanks and preventing oil from moving through a network. The former reduces available capacity; the latter can impose broader restrictions on production, refining and exports. Establishing the extent to which the latest strikes have achieved either effect will require further operational evidence.

Nevertheless, the decision to return repeatedly to Samara illustrates a development in Ukraine’s campaign against Russia’s energy sector. Rather than concentrating exclusively on the refineries that convert crude into fuel, Kyiv is also attacking infrastructure that connects oil production to its commercial and military end users.

For Moscow, the vulnerability of Samara is particularly consequential because the installation occupies a central position in the movement and preparation of Urals crude. Any sustained loss of its blending, storage or distribution functions would introduce additional pressure into an oil system already facing repeated attacks on its refineries and export infrastructure.

The latest operation therefore raises a question extending beyond the damage to one industrial site: whether Russia can maintain reliable oil flows when several interconnected stages of its energy supply chain are subjected to recurring disruption.