Overview
- Romanian intelligence said on Monday that it identified a sabotage network it believes was coordinated from Russia and tied to a fire near a state-owned arms site in Brașov on Sept. 14.
- Prosecutors named three suspects—two Belarusians and one Ukrainian—and said two were detained in Germany while a third was located in Poland, with European arrest warrants issued and extradition steps under way.
- Romanian agencies said the network’s handlers assigned targets across the region, focusing on state and private weapons manufacturers and other military‑industrial sites.
- Investigators described the group’s tradecraft as recruiting vulnerable people on social media, escalating tasks from surveillance to arson, and using third‑country SIM cards and encrypted apps to hide movements.
- Officials tied the case to a wider campaign of hybrid attacks, including recent strikes on merchant ships in the Black Sea, and said Romania will press extraditions, expand protections for critical sites, and deepen cooperation with NATO and EU partners.