European Intelligence Officials Warn of Escalating Russian Sabotage Campaign

Just before midnight in March 2024, a truck driver resting in his cab near an east London warehouse heard the sound of crackling flames. The facility stored supplies destined for Ukraine. He grabbed a fire extinguisher and rushed out — only to find the fire already raging out of control.

Minutes later, police began pounding on doors of a nearby apartment block, urging residents to evacuate. Families fled into the street. Within half an hour of the fire’s ignition, Dylan Earl — a British man later identified as one of the masterminds — received a message from his Russian handler:

“Excellent,” it read in Russian.

On Tuesday, a British court found three men guilty of carrying out the arson attack, which prosecutors described as part of a Russian state-backed sabotage campaign aimed at disrupting support for Ukraine. Two other men, including Earl, had already pleaded guilty to orchestrating the attack.

A Kremlin-Linked Campaign of Sabotage Across Europe

The fire is just one of over 70 incidents tied to Russia that the Associated Press has tracked across Europe since the invasion of Ukraine in 2022. These include acts of arson, bomb plots, and targeted sabotage. Intelligence officials from four European countries told AP they are increasingly alarmed by the use of untrained recruits in high-risk operations near residential areas and critical infrastructure.

“When you start a campaign, it creates its own dynamic and gets more and more violent over time,” said a senior European intelligence official.

While the Kremlin has denied all accusations, Western security agencies warn that Russia’s sabotage network is evolving — increasingly relying on deniable operatives and amateur recruits instead of professional spies, many of whom were expelled after the 2018 poisoning of ex-spy Sergei Skripal in the UK.

Telegram, Wagner, and Recruits with No Criminal Past

The London fire revealed how easily Russia has managed to recruit operatives in the West. Dylan Earl, 21, was active on pro-Wagner Telegram channels and began communicating in broken Russian with a handler known as “Privet Bot.” According to court records, Earl used Google Translate to converse with the operative, who praised him as “wise and clever” and even recommended the TV series The Americans as a “manual” for spying.

Despite Earl’s boasts of ties to groups like the IRA and a background filled with “soldiers, murderers, and drug dealers,” he had no confirmed criminal history. Intelligence experts say many recent recruits fit a similar profile: young, radicalized online, and offered only a few thousand dollars to carry out dangerous missions.

Firebombing a Warehouse Supplying Ukraine

Court evidence showed that Earl and another man remotely coordinated the warehouse attack, instructing two others — whom they never met — to carry it out. Surveillance footage captured the men pouring gasoline, lighting a rag, and torching the site. One of the attackers filmed the blaze as it spread. The warehouse stored critical equipment, including Starlink satellite systems used by Ukrainian forces.

The fire broke out just meters from a sleeping truck driver and within steps of occupied homes. More than 60 firefighters responded as the blaze threatened nearby residences.

“I started knocking on everyone’s doors screaming… ‘There’s a fire, get out!’” said Tessa Ribera Fernandez, a resident with a young child.

Escalating Sabotage: From Vandalism to Violence

Initially, Russia-linked sabotage in Europe focused on symbolic acts like vandalism or graffiti. But over the past year, intelligence officials say plots have turned far more dangerous — including bomb attempts at shopping centers, sabotage of cargo planes, and arson near civilian homes.

In one disturbing case, a Ukrainian teenager allegedly attempted to bomb an IKEA store in Lithuania. And in Poland, authorities foiled plans to burn shopping malls. Experts warn that Russia’s strategy now includes greater risks to civilian life — and that loosely supervised recruits may spiral into even deadlier tactics.

Beyond the Warehouse: Plots to Attack Russian Dissidents

After the London arson, Earl and his associates discussed targeting businesses owned by Evgeny Chichvarkin, a Russian exile who supports Ukraine. In court-shared messages, Earl suggested burning down his wine shop and restaurant in London, saying they should be turned to “ashes.” He even mused about adding nails to homemade bombs to injure people, despite also claiming they didn’t want casualties.

This erratic behavior illustrates a growing concern among Western agencies: that Moscow’s looser proxy model is harder to control.

“Sometimes operational control doesn’t hold,” said Lotta Hakala of Finland’s intelligence service.

That seemed to be the case in London. After the fire, Earl’s handler chastised him:

“You rushed into burning these warehouses without my approval… it will be impossible to pay for this arson.”
But the handler also encouraged future attacks, calling Earl “our dagger in Europe” and promising to “sharpen” him for more serious missions.

A Dangerous Trend with Global Implications

The trial exposed not just a single act of sabotage, but a broader pattern of Russian-directed operations now pushing into more violent territory. With low-cost, online radicalized recruits and Telegram-based coordination, experts warn that the line between amateur vandalism and lethal terrorism is blurring — all at the direction of a hostile foreign power.

Western intelligence agencies remain on high alert, tracking the expanding campaign — one that, as the London fire showed, is no longer limited to military targets but increasingly endangers ordinary civilians.