Investigative journalists from the European Broadcasting Union have conducted an in-depth probe revealing an alarming chain of hybrid attacks across Europe. Moscow is at the center of suspicions for orchestrating acts of sabotage, including arson at weapons factories and the use of explosive-laden drones against Ukrainian cargo planes in Leipzig. Analysts describe the perpetrators as "disposable agents," as many of them do not even realize they are working for Russian intelligence.

The investigation's trail leads teams to Latin America and even to a dance studio in Russia. A key figure in the scheme has emerged, going by the pseudonym Dios, which means "God" in Spanish. Here are the main findings established by the journalists:

  • In May 2024, a fire destroyed a building materials warehouse in Warsaw. Rafal Nowak, an employee, recalls: "On the night of May 23rd, the security guards woke me up. The fire was already raging, and the police and fire brigade were on the scene."
  • A week later, another fire broke out at a different warehouse, and footage of the incident appeared on a pro-Russian military Telegram channel. The official position of the Ministry of Secret Services is clear: "The Russians choose the locations. They wanted to film the flames at night because it is hard to see exactly what is burning, and they can use the footage for their propaganda," explains Jacek Dobrzynski.
  • The perpetrator of the Polish arsons, Colombian national Andres De la Oz de la Cruz, was later captured in the Czech Republic and sentenced to 8 years in prison. He admitted: "Guilt is burning me and tarnishing my family's good name."

Another case investigated by the team is that of Luis Murillo from the Colombian village of Caicedo. The former soldier, seeking work as a mercenary in Ukraine, stumbled upon "God's" offer on Facebook. His task led him to Romania, where he was captured in Bucharest while filming strategic facilities and sentenced to 6 years in prison. A similar fate befell a group of 7 people in Lithuania who attacked a military equipment plant.

Daniela Richterova from King's College London notes: "Often, the targets are vulnerable people who are in need of money and are inclined not to ask too many questions about the purpose of what they are being asked to do." For his part, Keir Giles from Chatham House adds that "Russia is learning lessons of all kinds. Lessons not only on how it can inflict damage, but also on how the respective country reacts."

The final week of the investigation confirmed that behind the pseudonym lies Oemis Romagosa Durruti — a dancer born in Cuba who lives in Petrozavodsk with his wife. Romagosa Durruti holds Russian citizenship. Using social media, he recruited over 10 mercenaries for payments of 1,500 dollars. The German media outlet attempted to contact him for comment, but he remains in hiding, and authorities continue to search for him.