Low-level agents in Germany: Russia’s covert power
Moscow is planning an aggressive attack on Germany, from espionage and disinformation to drone attacks.
German Chancellor Friedrich Merz said that although the country may not be at war, it is not completely at peace either.
In recent weeks, a series of drone deployments have hit the country, targeting military, critical and civil facilities – including Munich Airport. Both the Chancellor and Defense Minister Boris Pistorius have held Russia responsible for at least some of the incidents.
It is not yet clear who is behind the drone flights, as investigators will first need to identify its operators. So far, however, not even one drone has been reported recovered.
What is clear, however, is that it seems that there are two types of drone flights: suitable jobs that use large drones, and amateur flights made from off-the-shelf consumer models.
Authorities suspect that some of the latter may have been carried out by so-called “underground agents” operating on the margins of Russian intelligence networks.
A sign prohibiting drones is seen at Munich Airport on Friday, Oct. 3, 2025 – Enrique Kaczor / (c) Onw-Images
Short shares, high risk
Recently, the German intelligence service (BFV), the Federal Telly service (BKA), the Federal Criminal Police Office (BKA), and the military intelligence service (madness), and the military intelligence service (madness), and the military warning (madness), and the military warning)
These people, often approached through Social Media, are paid small sums to do “small” and risky activities, such as vandalism, surveillance, or burning.
“Low-level agents tend to be virtualized,” explained Dr. Christopher Neshri, Disform Expert and director of the Cyber Tellinct Institute, in an interview with Euronews.
However, he cautioned that while these people are engaged in intelligence-related work, they should not be classified as spies, as espionage involves the collection of information. It’s usually useless for intelligence gathering,” Nehring said.
Instead, their work may include setting fires, sticking propaganda on walls, spraying graffiti, or causing other types of damage.
Related
Is the idea of Ideology all it takes to be a low-level agent?
Dr. Hans Jakob Schindler, a terrorism expert and head of the Counter Exertimism project, told Euronews that these “agents” were recruited for a single purpose, which means they have little understanding of the intelligence structures of Germany or the rest of Europe. It works not only in Germany but in the entire continent.
For foreign actors, including Russia, their main advantage is anonymity. Most were identified by Russian-friendly telegraph channels, where they expressed pro-Russian views. According to Schindler, these working people – usually male and with low levels of formal education – are then contacted.
“It’s really about finding someone who’s really motivated who’s motivated to help or be cut back financially — ideally both,” Schunder said. Ideological motives alone, he added, are rare, as money always plays a role. “The cunning economic conditions and the Ideolodoal alignment are basically the perfect package,” explained the terrorism expert.
The Instant Telegraph app icon is seen on a smartphone in Marle Township, February 28, 2023 – AP photo
Schicker described the concept as straightforward: The goal is to accomplish as many small things as possible. A low-cost operation that can be effectively implemented in the merger, while keeping the risk on the Russian side very low.
Nehring agreed, noting that an agent’s duties are usually “not particularly complicated”. When it comes to attacks, then, these things are often small actions that cause limited harm but, taken together, create a feeling of insecurity. “Hybrid warfare is not about defeating Germany or Nato obviously,” Nehring Nehring explained. “It’s about the politics of the politics Touch protects by creating a different sense of uncertainty.”
While most of their actions may seem harmless at first glance, they are considered transgressors moving forward.
What do the jobs of a low-cost agent look like?
Earlier this year, during the German election campaign, more than 270 cars in several German regions were attacked with foam and decorated with stickers with the faces of the CHANCELLOR THE CHANCELLOR HABANCECK HABACHECH AND THE BLOGAN “BEGREER”.
At first, suspicions fell on the weather forecast. However, the spiegel investigation suggested that it might be the work of a Russian spy, aimed at stirring up public sentiment against the greens and their election.
German police officers stand on a street in Herdecke, October 7, 2025 – AP photo
German military support for Ukraine is another area of focus: Recent reports indicate that Russian spy drones have been monitoring arms deliveries to Kyiv. Low-level agents can be employed in operations like this, including Dieter S. and Alexander J., who is responsible for the case before the higher district court of Munich.
Dieter S. is accused of promising that his contacts will attack with explosions and attacks on military infrastructure and industrial sites in Germany. According to the investigators, Alexander J. had been helping him since at least March 2024. It is said that he checked potential goals and transferred photos and videos, according to military measures, for example – to his contact.
Ironically, plans were made to disrupt German support for Ukraine. One target of the missile was a railway line used for the shipment of weapons.
The anonymity of the Internet allows players from other countries to cover their tracks in such activities and always say “unavailable”. If a hired agent is caught carrying out cleaning or espionage work, as in the case of Dieter S.
Related
How are ‘Lower Agents Angenis’ treated by their superiors?
According to intelligence services, Russia is increasingly dependent on inexperienced operatives. The reason: Since the beginning of the invasion of Ukraine, it has become very difficult for Russian intelligence to send its agents to Germany.
While exact numbers are still unknown, various reports indicate that at least 60 diplomats have been expelled from Germany since the start of the full-scale attack. Not all Russians are spies by default, but many Western Internet organizations think that some are participating in the formation, such as generational students who enjoy immunity and are legally authorized to obtain political, economic, or cultural activities.
Because of this limitation, the use of “low-level agents” is referred to in security circles as an ‘act of desperation’.
Men start repairing a damaged apartment building following a Russian attack in Kyiv, October 23, 2025 – AP photo
“The low-level agents are ‘discarded’ in each sense,” explained Schindler, adding that the Russian side is not responsible for the short-term activities. “Their purpose is only to create uncertainty and gather information.”
Penalties for such actions range from “Anti-Constitul Constitul Stotage”, which carries five years in prison, to “activities related to Espionage” in the most difficult areas, which can lead to sentences of up to ten years.
Until now, investigators have often been able to catch the suspected low-level agents themselves – not the people they named.
According to a preliminary investigation by the ZDF, this is always a persistent problem for the German intelligence service: since even after thorough investigations, reliable parties are often completely identified.
How are agents hired? Find out tomorrow at uronews.com

