On Tuesday, workers at Germany’s Leipzig/Halle airport discovered a drone in a cordoned cargo zone near a runway. The drone carried a detonator and military-grade Semtex explosives, and it had landed beside a Ukrainian cargo aircraft. Around the same time, a second flying object apparently struck a diverted DHL cargo plane, which landed in Hanover with minor damage. The freight hub suspended operations, flights were directed to other cities, and Germany opened a counterterrorism investigation. Interior Minister Alexander Dobrindt described a hybrid attack scenario, while leaving questions of origin and authorship to investigators.
German prosecutors have yet to name a suspect, and it will take time for them to do so. Still, the incident matches, in method and in target selection, a campaign of sabotage across Europe that Western security services have repeatedly traced back to the Russian intelligence services. It’s a campaign with a long history. GRU military intelligence operatives blew up ammunition depots at Vrbetice in the Czech Republic in 2014, destroying stocks bound for Ukraine and killing two workers. The same unit has been linked to a series of explosions at Bulgarian arms depots and to the 2015 poisoning of arms dealer Emilian Gebrev, followed by the 2018 nerve agent attack on Sergei Skripal in the United Kingdom.
After the full-scale invasion of Ukraine, Russia intensified its efforts. In the summer of 2024, flammable devices were discovered hidden in parcels that were ignited at DHL logistics depots in Leipzig, Birmingham, England, and near Warsaw, Poland. Western agencies attributed the operation to the GRU and warned that one package had been destined for a cargo aircraft. That same year, allied services disrupted an alleged Russian plot to assassinate Armin Papperger, chief executive of Rheinmetall, Germany’s largest arms maker. In September 2025, drone incursions closed airports across Denmark, and a mass violation of Polish airspace forced NATO jets to open fire over allied territory for the first time in the alliance’s history. In November 2025, saboteurs reportedly recruited by Russian services blew up a section of the railway line linking Warsaw to Ukraine. Alongside these attacks came severed cables on the Baltic seabed, the arson at a Warsaw shopping center, and the recruitment of local criminals for deniable, one-off jobs.
Operations of this kind serve three functions.
The first objective is to exert psychological pressure on the population. An armed drone inside a major airport tells ordinary Germans that the war they read about has physical reach into their daily life. The second is coercion directed at the government. The drone signals to Berlin, Ukraine’s largest European backer, that its support carries a potentially high price. The third is escalation management on Moscow’s terms. Each incident tests the threshold of Western response, normalizes the previous level of aggression, and moves the line of the tolerable while remaining below the threshold of what would trigger a collective military reaction.
TOM ROGAN: A MULTIPOLAR WORLD WOULD BE DISASTROUS FOR INTERNATIONAL SECURITY
The Leipzig incident also shows the new nature of the threat. A few thousand dollars of commercial hardware can threaten the critical infrastructure of a key NATO ally. That reality puts drone technology and counter-drone defense at the center of NATO security. Ukraine, whose battlefield has become the proving ground for this form of warfare, should be a strategic partner in building resilience.
To limit future incidents of this nature, the European and German response has to be asymmetrical. That means more support for Ukraine, seizing more Russian assets, and similar disruptive operations against the networks running these campaigns. The response must change the calculation in Moscow so that each operation costs more than it yields. Germany got lucky in Leipzig, but luck is a poor foundation for security policy. European governments should treat this week’s incident as a warning and answer it in a way Moscow understands.