Chinese drones over German bases, paid saboteurs lighting fires for Russia—Germany’s military spells out the new normal

In its 2025 annual report, Germany's Military Counterintelligence Service (MAD) has highlighted Russia as a top espionage target. The service attributes this heightened threat to Germany's strategic location within Europe and NATO, the expansion of the Bundeswehr, and the introduction of new weapon systems. Repeated sabotage incidents on German soil last year are likely to have been orchestrated by Russian operatives, according to MAD.

For two years, Berlin has publicly cautioned about a Russian campaign of arson, surveillance, and drone intrusions orchestrated through local proxies. This warning was recently included in a January 2026 transparency law, further emphasizing the need for a public response. Germany serves as NATO's logistics hub for arming Ukraine, making it a prime target for Russian proxies seeking to carry out hybrid attacks.

MAD warns that the threat from low-level agents—individuals hired to plant fires or photograph military installations—has significantly increased. Recent cases, such as a bomb-laden drone discovered near a Ukrainian cargo aircraft at Leipzig/Halle airport, have been traced back to a Russian intelligence operative and a Belarusian petty criminal. Two Bulgarian nationals were also arrested in connection with a suspected arson incident near a defense electronics firm in Munich.

China's intelligence services have also been identified as a concern, with drones flying over German military bases and unauthorized entries at Bundeswehr sites. Additionally, some German soldiers have been visiting Russia and Belarus, creating vulnerabilities to blackmail and threats from Russian and Belarusian intelligence services.