German intelligence: Russia may target top executives in the defence industry

Germany’s Federal Office for the Protection of the Constitution (BfV) has reported a sharp rise in threats to the country’s defence industry. According to German domestic intelligence, Russian security services are stepping up espionage and sabotage operations and may move on to targeted attacks against executives in the defence sector. The warning comes against the backdrop of expanding military-technical cooperation between Germany and Ukraine, as reported by Euractiv.

In a special report, the Federal Office for the Protection of the Constitution notes that the threat level remains high following the March agreement between German Chancellor Friedrich Merz and Ukrainian President Volodymyr Zelenskyy to deepen German-Ukrainian cooperation. The intelligence agency also points out that the list of German companies linked to the defence sector, published by the Russian Ministry of Defence, should be viewed as Moscow’s response to these agreements.

According to German intelligence agencies, Russian state bodies and associated individuals are increasingly targeting defence industry firms and military infrastructure in Germany. At the same time, the agency does not rule out the possibility that, depending on how the war in Ukraine develops, targeted attacks on specific individuals – primarily the heads of defence companies – may occur.

Such fears are already well-founded. Armin Papperger, CEO of Germany’s largest defence conglomerate, Rheinmetall, has been under constant police protection since 2022. In 2024, US intelligence agencies warned the German authorities that Russia was likely planning an attempt on his life.

The report also refers to recent investigations by the German Federal Public Prosecutor’s Office and a number of incidents linked to suspicions of espionage and sabotage. These include the discovery of CCTV cameras near a German-British military engineering unit.

The change in tactics by the Russian security services is a cause for particular concern. According to the BfV, Moscow is increasingly using so-called ‘low-level agents’ – untrained operatives who are recruited via messaging apps in return for a small financial reward. Furthermore, intelligence services have noted the widespread use of phishing campaigns via secure messaging services.

This indicates that social engineering techniques – manipulating people to obtain confidential information or induce them to carry out malicious actions – remain one of the key tools of Russian operations, the intelligence service notes.

German intelligence agencies cite the use of commercially available geolocation data as another threat. According to the agency’s assessment, even publicly available information can help foreign intelligence services identify the places of residence of employees at strategic enterprises, their travel routes and daily routines.

In this regard, the Federal Office for the Protection of the Constitution recommends that organisations regularly provide staff training on information security and familiarise them with the new methods employed by foreign intelligence services.

“This is precisely why it is particularly important to run awareness campaigns on the adversary’s new methods and to regularly train staff in the secure use of information and communication technologies, especially in sensitive sectors such as the security and defence industries,” the intelligence agency’s recommendations state.

Staff are also advised to minimise the amount of personal information they publish online, and to exercise particular caution whilst travelling abroad, especially in countries where state authorities have extensive powers to monitor internet traffic and mobile communications.

German security agencies also warn that networks helping Russia to circumvent international sanctions continue to seek access to Western technology, equipment and expertise required by the Russian defence industry.

Against the backdrop of these warnings, a large-scale ramp-up in defence production is continuing across Europe. As previously reported, the war in Ukraine has led to record growth in arms production across EU countries. In May, the European Commission launched the SAFE (Security Action for Europe) defence fund, worth €150 billion, which provides European Union member states with preferential loans for investment in the defence industry. The programme aims to address Europe’s defence capability shortfall and strengthen its manufacturing capacity through joint procurement of arms and equipment.