Key Takeaways
- Russian intelligence agencies have intensified efforts to acquire Western technology and defense secrets as sanctions constrain Moscow’s wartime economy.
- Espionage tactics now include creating front companies, using intermediaries, and deploying cyber‑spies against European firms and critical infrastructure.
- Priority targets are high‑end defense systems (e.g., Sweden’s Gripen fighter), dual‑use civilian technologies (cameras, lasers), and emerging fields such as space, quantum, Arctic, and marine tech.
- British signals intelligence warns of relentless Russian targeting that also encompasses sabotage and assassination plots against the UK and its allies.
- A recent Swedish case shows how sanctions‑evading shipments of machine tools via Turkey are being intercepted, highlighting the need for corporate vigilance.
- Cyberattacks have moved from reconnaissance to destructive attempts, exemplified by a failed intrusion on a Swedish power plant aimed at undermining support for Ukraine.
- Russia’s war economy is under severe strain: roughly one‑third of GDP funds the conflict, inflation persists, and a projected 2026 budget deficit of $52 bn is already near‑filled.
- Temporary oil‑price gains from the Iran conflict have eased fiscal pressure but are insufficient to avert a looming financial crisis if Western sanctions continue.
- Intelligence indicates declining confidence among Russian officials about achieving “total victory” in Ukraine, yet the Kremlin’s authoritarian structure makes political change unlikely despite internal dissent.
Overview of Russia’s intensified espionage efforts
Russian intelligence services have grown markedly more aggressive in seeking Western technology and defense secrets, a shift driven by the tightening of international sanctions that squeeze Moscow’s wartime economy. Three senior European intelligence officials told The Associated Press that the Kremlin’s operatives are now employing a broader range of tactics—front companies, recruited middlemen, and cyber‑spies—to acquire critical know‑how. This escalation reflects both a strategic need to compensate for sanctions‑induced shortages and a willingness to accept higher risks of exposure in order to sustain Russia’s military-industrial base.
Methods: fake companies, middlemen, and cyber spies
Moscow’s agents are constructing elaborate false‑flag enterprises that pose as legitimate businesses in third‑party countries, allowing them to purchase sanctioned equipment without raising immediate alarms. Intermediaries—often vetted professionals with access to European supply chains—facilitate the transfer of goods ranging from machine tools to specialized software. Simultaneously, cyber units infiltrate European firms to exfiltrate research data, source code, and operational details that could later be weaponized or used to undermine Western infrastructure. According to Christoffer Wedelin of the Swedish Security Service, these activities are “serious effort[s]” aimed at obtaining advanced machine tools, factory equipment, and dual‑use technology.
Targeted sectors in Sweden
In Sweden, Russian intelligence is concentrating on the defense industry and high‑end research surrounding the country’s most advanced weaponry, notably the Gripen fighter jet. Wedelin explained that Moscow seeks not only complete systems but also subsystems and components—such as precision camera and laser technologies originally designed for civilian use—that could be integrated into Russian arms programs. The goal is to close technological gaps with NATO allies while preserving deniability through the acquisition of seemingly innocuous dual‑use goods.
Broader technology goals
Beyond conventional arms, Moscow is pursuing a spectrum of cutting‑edge fields that could confer long‑term strategic advantages. Juha Martelius, director of Finland’s Security and Intelligence Service, listed space technology, quantum computing, Arctic research, and marine engineering as priority areas. Space assets, for example, are essential for satellite‑based imaging, communications, and navigation—capabilities Russia needs “right now” to support its military operations and global influence operations. Additionally, sanctioned computer technology and software updates for industrial machine tools remain high on the acquisition list, as they are vital for maintaining and modernizing Russia’s manufacturing base.
UK intelligence warning
Anne Keast‑Butler, director of the United Kingdom’s signals intelligence agency, warned that Russia is “relentlessly targeting” the U.K. and its European allies, not only to steal technology but also to plot sabotage and assassination attempts. Her remarks underscore the multidimensional nature of the threat: cyber intrusions, human‑source recruitment, and covert action teams are all being employed to destabilize Western societies and impair their ability to support Ukraine. The breadth of these operations suggests a coordinated campaign aimed at eroding confidence in Western security structures.
Case example: Swedish arrests linked to Turkey company
In May, Swedish police detained two individuals suspected of violating sanctions after they facilitated dozens of shipments of metalworking and metal‑turning machine tools from a Turkish company to Russia. The case illustrates how sanctions‑evasion routes exploit third‑country intermediaries to move dual‑use goods that are otherwise prohibited. Wedelin noted that such schemes are becoming increasingly complex, compelling businesses to scrutinize their supply chains more closely lest they unwittingly become part of Russia’s war supply chain.
Cyberattacks on infrastructure
Russian cyber actors have shifted from mere reconnaissance to destructive attempts against European critical infrastructure. Wedelin cited an incident in which Russia‑linked actors tried to “destroy” a Swedish power plant; the intrusion was detected and thwarted, but the attack signaled a clear change in Moscow’s modus operandi. Previously, Swedish security services had observed mostly low‑level scanning and cyber‑criminal activity; the power‑plant attempt marked a transition to higher‑risk operations intended to undermine Western support for Ukraine by creating instability and fear.
Economic strain and war financing
The aggressive espionage push appears to be a response to mounting internal economic pressures. Kaupo Rosin, head of Estonia’s Foreign Intelligence Service, described Russia’s economy as “not doing well at all,” with roughly a third of gross domestic product now directed toward the war effort. Sanctions have slowed growth and fueled persistent inflation, while the Kremlin has projected a 2026 budget deficit of 3.7 trillion rubles ($52.1 billion). By the end of February, the deficit had already reached about 3.4 trillion rubles ($47.9 billion), indicating that fiscal reserves are being depleted rapidly.
Impact of Iran war and oil revenues
The outbreak of conflict in Iran on February 28 caused a spike in global oil prices, providing Russia with a temporary revenue boost. The United States has issued sanctions waivers for the sale of Russian crude, and the United Kingdom softened its own sanctions in an attempt to curb global fuel costs. Rosin acknowledged that this influx of cash has likely improved Russia’s short‑term budget outlook, but he warned that it “doesn’t save them” if Western pressure persists. Should sanctions remain in place, Moscow could face a financial crisis toward the year’s end, exacerbating the strain on its war machine.
Intelligence assessments of Russian morale and leadership
Intelligence gathered by Estonian and Finnish services reveals a growing sense of gloom among Russian officials over the past six months; the once‑ubiquitous narrative of “total victory” in Ukraine has faded. Keast‑Butler noted that nearly half a million Russian soldiers have been killed since the full‑scale invasion began in 2022, a figure that both sides keep largely undisclosed. Stalled battlefield progress, coupled with economic woes, has led many Kremlin insiders to privately question the purpose of the continuing conflict. While Martelius believes President Vladimir Putin receives a fairly accurate picture of the economic challenges—despite some sanitized reporting—he cautioned that analyzing Russia through a liberal democratic lens is “very dangerous,” asserting that profound political change remains unlikely despite internal dissent.