Leipzig airport drone bomb raises Russian hybrid warfare fears

We can do that. Remember. Tomorrow might be more serious.
A Russian intelligence expert explains Moscow's likely message behind the Leipzig drone attack.
Mark

Why would Russia target an airport runway when it could hit military installations directly?

Mimi

Because the point isn't necessarily to destroy something expensive. It's to demonstrate reach and create fear. An attack on a major civilian airport sends a message to Germany's government and public: we can get to you whenever we want. It's psychological warfare.

Mark

But the Ukrainian planes were there. Doesn't that suggest they were the actual target?

Mimi

Possibly. But Ukrainian officials won't confirm it, and that hesitation itself is telling. Whether the planes were the target or just convenient cover, the effect is the same—it links the attack to Ukraine support, which is exactly the narrative Russia wants to push.

Mark

How confident are investigators that this is Russian?

Mimi

There's no smoking gun yet. But the 2024 network they uncovered—the way explosives were transported, the drone components, the cryptocurrency payments—it established that Russia has both the infrastructure and the willingness to do exactly this. The Leipzig drone being loaded with Semtex, which contains the same explosive compound found in those food cans, is a striking parallel.

Mark

If they're caught doing this, what's the consequence?

Mimi

That's the gamble Russia is taking. The handlers are in Russia, beyond German jurisdiction. The foot soldiers—the Vladyslav D.s of the network—get arrested and tried. But the people giving orders stay safe. It's a calculated risk that the cost of a few operatives is worth the strategic gain of intimidating Europe.

Mark

So this will happen again?

Mimi

Experts think so. As long as Ukraine keeps winning on the battlefield, Russia will keep trying to win through sabotage and fear. The question is whether Europe recognizes it as a coordinated campaign or treats each incident as isolated.

  • A quadcopter packed with explosives was found between Ukrainian cargo planes at Leipzig airport, forcing a runway lockdown and prompting a bomb disposal robot to roll across the tarmac — while a departing DHL plane may have struck a second drone.
  • Germany's interior minister declared a 'new level of danger,' and investigators are now linking the device's explosive material — possibly Semtex containing RDX — to a 2024 network of Russian-linked operatives who smuggled drone components and explosives across Europe hidden in food cans and headphone packaging.
  • The suspected network involved couriers like a Ukrainian man who followed encrypted orders from a handler called 'Warrior,' making cross-border runs to retrieve materials buried in cemeteries and forest drops — paid in cryptocurrency, never told the intended targets.
  • Experts warn the Leipzig attack may have been less about physical damage and more about psychological messaging — a signal that Russia can reach deep into European infrastructure, with the implicit threat that tomorrow could be far worse.
  • With hybrid attacks — arson, drone incursions, airport sabotage — forming an increasingly documented pattern, analysts expect such operations to escalate sharply as Russia attempts to fracture European support for Ukraine through intimidation rather than open confrontation.

In the quiet hours of a Tuesday night at Leipzig airport, a small drone loaded with explosives was discovered between two Ukrainian cargo planes — a moment that German officials have called a 'new level of danger.' The incident arrives against a backdrop of documented Russian-linked sabotage networks operating across Europe, raising the question of whether this was an act of destruction or, more precisely, an act of communication. As Germany remains one of Ukraine's largest military supporters, the event fits a recognizable pattern: not war fought on a battlefield, but war fought through fear, ambiguity, and the slow erosion of resolve.

Late Tuesday night at Leipzig airport, ground staff spotted a small quadcopter floating between two Ukrainian cargo planes — one fuselage bearing the words 'Be Brave Like Kherson.' The drone was loaded with explosives. A runway shut down, a bomb disposal robot crossed the tarmac, and a departing DHL plane aborted its takeoff after what investigators believe may have been a collision with a second device.

Germany's interior minister warned of a 'new level of danger,' hinting at foreign power involvement. Russia denied any role. But European security officials began drawing connections to a network uncovered in 2024, when German authorities found Russian-linked operatives moving explosives and drone components across Poland and Lithuania — concealing RDX in food cans and detonators inside headphone packaging. Lithuanian prosecutors seized material equivalent to roughly six kilograms of TNT. Nearly two dozen suspects were charged, but their handlers, believed to be operating from Russia, were never caught.

One courier, a Ukrainian man known in court documents as Vladyslav D., described following encrypted instructions from a contact called 'Warrior' — driving across Eastern Europe to retrieve packages from forest drops, roadside locations, and a cemetery where drone components were buried beneath plastic flowers. He was paid over two thousand dollars in cryptocurrency and never told what the materials were for.

The explosive found in the Leipzig drone may have been Semtex — a compound containing RDX, the same material discovered in those Lithuanian food cans two years prior. Explosives experts noted that even without a direct hit, a blast wave from such a device could cause significant aircraft damage.

But analysts suggest the physical threat may be secondary. Russia scholar Andrei Soldatov described the incident as a message: proof that Moscow can reach one of Europe's largest airports, with the implicit warning that the next move could be worse. Germany, as one of Ukraine's largest military suppliers, is a logical target for such intimidation. Analyst John Lough framed it plainly: an effort to scare European governments into reconsidering their support for Kyiv by making the cost of that support feel dangerously close to home. Those who track Russian operations expect such attacks to intensify in the months ahead.

Late Tuesday night at Leipzig airport, ground staff spotted something unusual floating between two enormous cargo planes. The aircraft bore the blue and yellow stripes of Ukraine—one fuselage even carried the words "Be Brave Like Kherson," a reference to the southern city now caught in the grinding frontline of Russia's invasion. What the workers had found was a quadcopter, small enough to hold in two hands, loaded with explosives. A runway went into lockdown. A bomb disposal robot rolled across the tarmac. Around the same moment, a DHL cargo plane attempting to depart struck what investigators believe may have been a second drone, forcing it to abort its takeoff.

Germany's interior minister immediately warned of a "new level of danger," suggesting the attack "may involve foreign powers." Russia has denied any involvement. But in the days since, European security officials have begun connecting dots that stretch back across the continent—and the picture they're assembling suggests Moscow has both the capability and the track record to pull off exactly this kind of operation.

Two years earlier, in 2024, German authorities uncovered a sprawling network of Russian-linked operatives working across Poland and Lithuania. These men didn't just handle explosives and drone components—they transported them methodically across Europe, concealing RDX explosives in cans of sweetcorn and chopped tomatoes, hiding detonators inside headphone packaging. Lithuanian prosecutors seized enough material to equal roughly six kilograms of TNT. Some devices had been specially engineered to intensify the blast. Nearly two dozen suspects were eventually charged with terror offences, but their handlers—believed to still be operating from Russia—remain at large. It remains unclear whether the entire network was dismantled or whether hidden caches of material were ever fully recovered.

One suspect, a Ukrainian named Vladyslav D., provided investigators with a detailed account of his role in this operation. Over the course of July 2024, following encrypted instructions from someone he knew only as "Warrior," he made multiple long drives across Eastern Europe. He collected soggy headphone packages from a Lithuanian forest, retrieved cans of corn lightly dusted with soil from hidden locations, dug beneath plastic flowers in a cemetery to unearth a bin bag containing drone propellers and components. He drove these items across borders, leaving them at roadsides and in hostel rooms for unknown handlers to retrieve. For his work, he was paid more than two thousand dollars in cryptocurrency. The intended targets were never disclosed to him.

Some German sources now report that the explosive found in the Leipzig drone was Semtex—a material containing RDX, the same compound that was discovered hidden in food cans in that Lithuanian cemetery two years ago. The coincidence has not gone unnoticed. Explosives expert Jackie Akhavan of Cranfield University noted that a metal drone casing might have punctured an aircraft fuselage, while the blast wave alone could have caused significant denting, particularly if the device contained fragmentation material designed to amplify damage.

But the physical harm may not have been the point. Andrei Soldatov, who studies Russia's intelligence apparatus, argues that if Moscow was responsible, the goal was psychological. "It's a message," he explained. "You get something like that into one of the biggest European airports and you send the message that 'we can do that. Remember.' You hint to the adversary that you might cause a really big problem: that tomorrow might be more serious." Russia faces mounting pressure from Ukraine's relentless drone campaign and the repeated humiliation of battlefield setbacks. Sabotage operations across Europe—arson attacks on facilities supporting Ukraine, drones over sensitive sites, explosives on airport runways—fit a documented pattern of hybrid warfare designed to intimidate and destabilize.

Germany is among Kyiv's largest suppliers of military aid, making it a logical target for intimidation. John Lough of the New Eurasian Strategies Centre sees the Leipzig incident as part of a broader effort to undermine European support for Ukraine by highlighting the dangers of escalation. "This is Russian interference," he said. "It's all part of undermining support for Ukraine by pointing to the dangers of escalation and, frankly, scaring the German authorities." He expects such attacks to increase sharply in the coming months as Russia seeks to shift the balance of the war through fear rather than force.

NATO officials have acknowledged the incident and deferred to German investigators. Antonov Airlines, which operates the Ukrainian cargo planes, has remained cautious, declining to confirm whether those aircraft were the intended target. Ukrainian officials have similarly avoided speculation. But among those who track Russian operations, the pattern is clear enough. The network that moved explosives and drones across Europe in 2024 may have been partially dismantled, but the capability—and the will—appears to remain.

It's a message. You get something like that into one of the biggest European airports and you send the message that we can do that. Remember. You hint to the adversary that you might cause a really big problem: that tomorrow might be more serious.
— Andrei Soldatov, Russian intelligence expert
This is Russian interference. It's all part of undermining support for Ukraine by pointing to the dangers of escalation and, frankly, scaring the German authorities.
— John Lough, New Eurasian Strategies Centre
Quer a matéria completa? Leia o original em BBC News ↗
Fale Conosco FAQ