Officials from five separate European intelligence agencies have told the Financial Times that the Kremlin has ordered a major expansion of assassination operations against Europe's defence industry. The newspaper published its investigation on 11 October 2026. The officials say the target set now reaches beyond chief executives of flagship arms makers. It includes senior executives, officials and staff at smaller defence firms, particularly drone and component manufacturers.
The campaign itself is not new. In early 2024, United States and German intelligence foiled a Russian plot against Armin Papperger, chief executive of Rheinmetall, Germany's largest arms maker. What differs now, in the agencies' account, is breadth. Five services briefing one newspaper together is uncommon, and the Financial Times reaches the executives most exposed. That reading of the channel is an inference, not a stated purpose. This article asks a narrower question than whether the threat exists. Can European security architecture, built around state-on-state deterrence, answer plots designed to stay below NATO's collective-defence threshold?
What the agencies say has changed
According to the Financial Times investigation and iNews reporting of 11 October, Russia's military intelligence service, the GRU, is working more closely with organised-crime groups as intermediaries. These groups reportedly split reconnaissance, logistics and attack roles across separate cells. Recruitment draws on criminal networks and social media. iNews reported that payments range from £5 for graffiti to £10,000 for an assassination or large-scale arson.
Sinan Selen, head of Germany's domestic intelligence service, told lawmakers that Russia or state-controlled actors are deliberately planning violence against individuals and widening both targets and methods, according to i24 News. iNews reported, citing intelligence agencies and counter-terrorism forces, that hybrid incidents attributed to Russia rose 60 per cent so far in 2026 compared with the same period of 2025.
That backdrop includes the attempted Leipzig airport drone attack, which Berlin blamed on Russia, with security services and investigative files pointing to suspects linked to the GRU. It also includes the second EMCO ammunition depot fire in Bulgaria, whose cause remains unresolved.
European services also say some assassination plots have been detected and disrupted. The details are classified, and this article does not speculate on them. Claudine Fry, a London-based partner at Control Risks, told the Financial Times that assassination risk is now "much higher on corporate radars". According to the Financial Times reporting, the threat has also spread to companies in critical infrastructure and energy.
Observers are reading: how the gap between state-level intelligence and corporate exposure shapes the response, and what the NATO record implies.
Become an Observer — it's free. Get full access to all Crisis.Zone analysis, briefings and breaking coverage.
What the warning changes, and what it cannot
For defence firms, especially drone and component makers that once fell below the threat threshold, the warning is grounds to revisit security budgets and travel protocols. Control Risks' Claudine Fry says assassination risk is now much higher on corporate radars. For European governments, it raises the cost of treating incidents as separate criminal cases, because the agencies describe a connected campaign.
For NATO, it adds to a record of attribution without an agreed collective response. Whitaker's statement answers who Washington will name. It does not say how many incidents would justify a joint response.
On the evidence reviewed, the warning improves public awareness and gives firms a basis to act. Nothing in that material points to a new mechanism that would deter or punish assassination by proxy. That judgment is time-bound. It reflects the position as of 11 October 2026 and would change if governments announced enforceable measures.
Become an Observer (it's free) to unlock direct links to all sources used in this article.
We believe you deserve to verify everything we write. That's why we meticulously document every source.
