Since the summer of 2026, there have been drone overflights or explosions almost daily in some countries of Central and Southeastern Europe, while the war for the Baltic states, Poland, Moldova, and Romania is now very real.
NATO’s Eastern Flank Faces Rising Sabotage and Airspace Violations as Russia Intensifies Pressure
Incidents Mount Across Poland, Romania, and Moldova
On September 24, Moldovan authorities registered four separate drone flights, with two explosive devices detonating on national territory and prompting a temporary closure of the country’s northern airspace. Simultaneously, Romanian airspace faced intrusions from two drones, resulting in the detonation of one device in the northern region and the grounding of border checkpoint operations near the Ukrainian frontier.
Poland experienced a parallel escalation during the same 48-hour window. Polish operational military commands confirmed that a Russian Mi-8 helicopter violated national airspace from Kaliningrad, penetrating 300 meters inland for 42 seconds. NATO fighter jets scrambled on multiple occasions to intercept incoming aerial threats near the border, while two Polish border crossings required immediate evacuation due to nearby drone strikes. A ground station for the Starlink satellite network located 40 kilometers south of Warsaw suffered a major fire on the evening of September 23, an event the Polish government formally categorized as an intentional act of sabotage.
Industrial Sabotage Targeting Defense Supply Chains
Beyond border airspace violations, security services across the continent are grappling with physical attacks on defense manufacturing infrastructure. A major fire at a facility belonging to WB Electronics in Skarżysko-Kamienna, Poland, caused an estimated 15 million злоти (3,7 милиона евро) in damages, according to initial assessments cited by regional reporting. The targeted plant produces critical tactical equipment, including FlyEye reconnaissance drones and Warmate loitering munitions utilized by Ukrainian and Polish armed forces. The Internal Security Agency of Poland treats the blaze as a deliberate sabotage operation.
In a related operation, Slovak counterintelligence authorities disrupted a planned arson attack targeting a manufacturing plant operated by the Ukrainian defense firm Skyeton. Law enforcement detained three suspects—one Ukrainian citizen and two Latvian nationals—before the facility sustained critical damage. Responsibility for both the Polish factory fire and the attempted Slovak arson was claimed by an obscure digital entity operating under the name “Global Citizens Against War 1984,” which framed defense suppliers as legitimate targets due to their exports to active conflict zones.
Digital Forensics and Attribution
Investigative reports published by outlets including Aktuality.sk, The Insider, and Niezalezna.pl have uncovered extensive digital footprints tying the “Global Citizens Against War 1984” network to Russian state-backed infrastructure. Code-level analysis of the group’s web portal revealed the use of the YS Text font family developed by the Russian technology enterprise Yandex, alongside automated content generation tools designed to obscure authorship. Social media channels associated with the campaign retained administrative interface elements in the Russian language.
Journalistic inquiries into the organization’s public-facing roster also exposed fabricated identities. Profiles featured on the group’s website—including a purported Polish former soldier named Robert Lewanowski and a Serbian national named Stefan Ilić—contain chronological impossibilities, such as claims of mandatory two-year military service periods that did not align with actual Polish conscription laws in 2007.
Political Responses and Strategic Outlook
Political leaders across the eastern flank argue that these cumulative events represent a deliberate strategy by Moscow to test Western resolve and drain European resources. Polish Prime Minister Donald Tusk addressed the incidents by stating that Russia is actively refining an aggressive form of psychological and physical pressure to which European allies must remain fully prepared. While initial diplomatic responses to border violations earlier in the year often favored cautious or abstract characterizations, governments in Warsaw, Bucharest, and Chisinau now openly designate the daily drone flights, infrastructure fires, and airspace breaches as direct acts of hybrid warfare requiring heightened collective defense readiness.