Low-level agents in Germany: Russia’s covert force

Moscow is stepping up hybrid attacks against Germany, from espionage and disinformation to drone raids.

German Chancellor Friedrich Merz said that while the country may not be at war, it is not completely at peace either.

In recent weeks, a series of drone incursions have disrupted the country, targeting military, critical and even civilian facilities, including Munich airport. Both the Chancellor and Defense Minister Boris Pistorius have blamed Russia for at least some of the incidents.

It is still unclear who exactly was behind the drone flights, as investigators would first have to identify their operators. However, so far not a single drone has been recovered.

What is clear, however, is that there appear to be two types of drone flights: professional operations using larger drones and amateur flights performed with commercially available consumer models.

Authorities suspect that some of the latter may have been carried out by so-called “low-level agents” working outside Russian intelligence networks.

Short tasks, high risk.

Recently, Germany’s internal intelligence service (BfV), the Federal Intelligence Service (BND), the Federal Criminal Police Office (BKA) and the Military Counterintelligence Service (MAD) issued a warning urging people not to allow foreign actors to recruit them as “low-level agents.”

These people, often contacted through social media, are paid relatively small sums to carry out “menial” and low-risk tasks, such as vandalism, surveillance or arson.

“Low-level agents are usually deployed for tangible actions,” explained Dr. Christopher Nehring, disinformation expert and director of the Cyber ​​Intelligence Institute, in an interview with Euronews.

He warned, however, that while these agents perform intelligence-related work, they should not be classified as spies, since espionage involves the covert collection of information. “They are generally not tasked with gathering intelligence,” Nehring added.

Instead, your job may involve setting fires, putting propaganda stickers on walls, painting graffiti, or causing other types of damage.

Related

Is ideology all it takes to become a low-level agent?

Dr Hans Jakob Schindler, a terrorism expert and head of the Counter Extremism Project, told Euronews that these “agents” are hired for a single purpose, meaning they have little understanding of Russian intelligence structures in Germany or across Europe. They operate not only in Germany but throughout the continent.

For foreign actors, including Russia, their main advantage is anonymity. Most are identified through Russia-friendly Telegram channels, where they have expressed pro-Russian views. According to Schindler, these agents (generally male and with lower levels of formal education) are then contacted and recruited.

“Really, it’s just a matter of finding someone who is ideologically motivated to help or who has financial incentives, ideally both,” Schindler said. Purely ideological motives, he added, are rare, since money usually plays a role. “Precarious economic circumstances plus ideological alignment are basically the ideal package,” the terrorism expert explained.

Schindler described the concept as quite simple: the goal is to carry out as many small-scale actions as possible. Low-cost operations that can be effective together, while keeping the risk for the Russian side extremely low.

Nehring agreed, noting that officers’ tasks typically “aren’t particularly complicated.” When it comes to sabotage, he said, it is often minor actions that cause limited damage but together create a feeling of insecurity. “Hybrid warfare is not about directly defeating Germany or NATO,” Nehring explained. “It is about politically weakening the will to defend by creating a general feeling of uncertainty.”

While many of their actions may seem harmless at first glance, they are considered precursors to further escalation.

What are the operations of ‘low-level agents’ like?

Earlier this year, during Germany’s election campaign, more than 270 cars in several German states were sabotaged with expanding foam and adorned with stickers featuring the face of Green Party chancellor candidate Robert Habeck and the slogan “Be Greener.”

At first, suspicion fell on climate activists. However, a Spiegel investigation suggested it may have been a Russian sabotage operation, aimed at stirring up public sentiment against the Greens and their candidate.

Germany’s military support for Ukraine is another focal point: recent reports indicate that Russian spy drones have been monitoring weapons deliveries to kyiv. Low-level agents could also be used in such operations, including Dieter S. and Alexander J., who are currently facing trial at the Higher Regional Court in Munich.

Dieter S. is accused of promising a contact that he would carry out explosive and arson attacks against military infrastructure and industrial plants in Germany. According to investigators, Alexander J. had been assisting him since at least March 2024. He is said to have scouted potential targets and transmitted photographs and videos (e.g. of military transports) to his contact.

According to the indictment, the plans were aimed at disrupting Germany’s support for Ukraine. One possible target cited was a railway line used for arms shipments.

The anonymity of the Internet allows foreign actors to cover their tracks in such operations and remain “untraceable.” If a recruited agent is caught carrying out a sabotage or espionage task, as in the case of Dieter S., he is solely responsible for the act.

Related

How are ‘low-level agents’ treated by their handlers?

According to intelligence services, Russia is increasingly dependent on inexperienced agents. The reason: Since the start of the invasion of Ukraine, it has become much more difficult for Russian intelligence to deploy its own agents in Germany.

While exact numbers are unknown, various reports indicate that at least 60 Russian diplomats have been expelled from Germany since the start of the full-scale invasion. Not all Russian diplomats are automatically spies, but many Western intelligence agencies assume that some engage in espionage, as diplomats enjoy immunity and are officially accredited for political, economic or cultural duties.

Because of these limitations, the use of “low-level agents” is referred to in security circles as an “act of desperation.”

“Low-level agents are ‘discarded’ in every sense,” Schindler explained, adding that the Russian side does not assume any responsibility for short-term agents. “Their only goal is to create uncertainty and gather information.”

Penalties for such actions range from “unconstitutional sabotage”, which carries up to five years in prison, to “activities related to espionage” in particularly serious cases, which can carry sentences of up to ten years.

Until now, investigators have generally only been able to detain suspected low-level agents, not the people who recruited them.

According to an investigation by ZDF Frontal, this remains a constant dilemma for the German intelligence service: since, even after a thorough investigation, those responsible often cannot be conclusively identified.

How are low level agents recruited? Find out tomorrow on euronews.com