Russian hybrid attacks expand to drone sabotage and fake news

A recent report from Recorded Future’s Threat Intelligence Group describes a new wave of Russian operations targeting European critical infrastructure. The activities combine cyber intrusions, disinformation campaigns, and physical drone attacks. Analysts say the tactics are part of a broader strategy to pressure Ukraine‑supporting nations and amplify social unrest.

The group identified a disinformation network called CopyCap that impersonates media outlets in France and Norway, using AI‑generated text and audio to spread false narratives. In Leipzig‑Halle airport a drone equipped with explosives attempted to breach the facility, an incident the EU has classified as a hybrid attack. Energy grids, communication networks, and logistics firms that transport aid to Ukraine are highlighted as vulnerable targets.

Researchers warn that future attacks may employ multiple vectors simultaneously, urging organizations to adopt multi‑factor authentication and coordinated response plans.