Russian operative linked to failed Leipzig airport drone attack on Ukrainian cargo plane

The Leipzig airport sabotage attempt

In the early hours between 4 August and 5 August 2026, an explosive-laden drone struck the wing of a parked Ukrainian Antonov An-124 cargo aircraft at Leipzig/Halle Airport in Germany. The aircraft held approximately 25,000 liters of aviation fuel along with military munitions on the airport apron. The explosive payload, consisting of 1.8 kilograms of military-grade Semtex packed inside a metal tin can, dropped onto the tarmac without detonating because the triggering mechanism was damaged. A second unmanned aerial vehicle reportedly collided with a freight transport aircraft at the same facility without causing structural damage. Investigators subsequently recovered the remnants of two additional drones and an improvised antenna rig attached to a nearby tree, which had been configured to guide the unmanned aircraft toward the logistics hub.

Intelligence tracking and operational roles

Intelligence files from Germany, Poland, and Lithuania identified Russian-Latvian national Oleg Levushkin as the organizer behind the operation. Levushkin, who portrayed himself online as a family man with interests in fishing, skiing, and European motorcycle tours, had maintained contacts with Russian intelligence officer Denis Smolyaninov since 2007, when Smolyaninov mediated a financial dispute involving Levushkin's business. Smolyaninov, who was sanctioned by the British Foreign Office in 2025, directed the Ukraine department of Russia's GRU military intelligence, specializing in psychological operations and European sabotage campaigns coordinated via Telegram. Levushkin entered Germany during the summer of 2026 after traveling through Turkey. After renting a vehicle at a Berlin airport, Levushkin inspected several weapons caches and conducted reconnaissance at Leipzig/Halle Airport on 31 July 2026, with rental car GPS data placing him near the passenger and freight terminals. German security agencies were aware of Levushkin's arrival and his ties to GRU Unit 29155, though they did not place him under active surveillance before he departed Germany via Berlin on 2 August 2026.

Forensic links across European caches

German investigators concluded that Levushkin delegated the physical execution of the attack to Andrei Karshakov, a Belarusian national acting as a disposable operative. Forensic teams matched DNA recovered from a glove fragment attached to the tree-mounted steering antenna directly to Karshakov, whose biometric profile existed in Finnish police records following a 2010 theft arrest at a clothing store. Polish authorities later linked Karshakov to a separate arson attack in Poland. The Semtex used in the device had been transported into Germany along a smuggling route passing through Bulgaria and Serbia before being deposited in temporary hideouts.

Forensic examinations linked the Leipzig bomb design to previous Russian intelligence caches discovered across eastern Europe. The tin can in Leipzig was sealed with a metal plate bearing seven circular stamped indentations. Lithuanian police had uncovered matching devices, labeled as canned corn and containing 968 grams of explosives (equivalent to roughly 700 grams of TNT per can), buried beneath artificial flowers and concrete slabs at a cemetery in Kaunas on 20 August 2024. Subsequent discoveries in Lithuania in January 2025 and June 2025 yielded matching plates designed to act as shrapnel projectiles. A report by the Forensic Science Service of the Police Department of Lithuania found that the plates were produced by the same stamping machinery, demonstrating a shared production source.

Diplomatic and security fallout

The Leipzig/Halle hub serves as a primary logistical transit point for NATO operations and military aid deliveries bound for Ukraine. German intelligence agencies assessed that the targeted strike was intended to undermine European support for Ukraine by staging dangerous incidents at key infrastructure points. Russian officials rejected the findings, asserting that the accusations were intended to escalate anti-Russian sentiment across Europe. In response to the uncovered sabotage network, the German federal government ordered the closure of the Russian Consulate General in Bonn and shut down the Russian House in Berlin. A spokesperson for Germany's Federal Office for the Protection of the Constitution declined to comment on operational specifics citing the active investigation.