Poland Uncovers Russian Drone Attack Plot

For Belgrade, which has spent years trying to stay outside the open confrontation between Moscow and its Western neighbours, the case Polish authorities announced on June 11 is not a distant story. It shows just how thin the line between hybrid operations and outright terrorism has grown along the European Union’s eastern edge, and Serbia’s careful balancing act increasingly depends on the stability of exactly that edge.

Poland’s Internal Security Agency, known as the ABW, and the National Prosecutor’s Office said that Russian military intelligence, the GRU, had been preparing a series of terrorist attacks aimed at civilian and logistical infrastructure in Poland, Lithuania and Germany. According to the investigation, the operation relied on a method that looks almost mundane: everyday objects turned into weapons. Two cans labelled as corn, indistinguishable from the goods on any supermarket shelf, were filled with explosives estimated at around 2.8 kilograms of TNT.

How was the corn can attack plan designed?

The details Polish authorities laid out point to a carefully built supply chain. Identical explosive cans, according to the statement, were also dug up at a cemetery in Lithuania, suggesting pre positioned caches rather than improvisation. The arrested courier is suspected of moving precisely those cans, along with drone components and SIM cards, between the three countries, stitching the logistics into a single network.

One line of inquiry, which Polish authorities cite as a working theory, holds that the explosives were not meant to be planted by hand but launched by drone. The cans, investigators say, were designed to fit into the mounts of unmanned aircraft, allowing an attacker to strike a target without ever being present at the scene. That scenario erases the boundary between sabotage and remote terrorism, and it explains why Polish prosecutors classified the case as preparation of terrorist acts rather than ordinary smuggling.

The suspect, prosecutors say, faces life imprisonment. Polish authorities intend to wrap up the investigation by the end of the year, meaning that fuller findings on the intended targets and those who ordered the operation may not emerge for several months.

What does this case mean for European security?

The discovery fits a pattern that European security services have been describing for months as a low intensity campaign on Union soil. Drones over military bases, parcels that ignite in logistics hubs, faults on undersea cables: each incident on its own can read like an accident, but the sum points to systematic pressure. Poland, bordering Belarus and the Kaliningrad region, has long cast itself as the front line of that quiet confrontation.

For countries that, like Serbia, keep a diplomatic channel open toward both Moscow and Brussels, cases like this carry a double message. They show that hybrid operations do not select targets by NATO membership alone, but by logistical usefulness, and that intelligence networks stretch across several states at once. The EU’s High Representative and member state agencies are calling more loudly for a common response, yet the institutional tools for cross border investigations still lag behind the speed at which such networks are assembled and deployed.

The question that stays open is not only who ordered this operation, but how many similar caches may still be buried somewhere. In your view, how should Europe respond to a threat hidden inside something as ordinary as a can of corn?