Updated daily at 09:00 (EET) Index 5.3 = 0.0 elevated
Index methodology RSS
English
Baltic Monitor
Telegram
Issue of November 6, 2026 · FridayNo. 157

Europe: hoax bomb threats hit at least 21 flights; a Finnish expert sees a likely hybrid operation

5.3/10 elevated = 0.0vs. previous issue
In this issue ▾
  1. Top stories of the day
  2. By area, in detail
  3. Contradictions and discrepancies
  4. Escalation risk assessment (0–10)
  5. Sources

Issue of 6 November 2026 — covering 5–6 November 2026

Note: on 5–6 November no drone incursions into the Baltic states or Poland, no border incidents and no reports of Russian or Belarusian troop movements were recorded; the window was shaped by hybrid threats and diplomacy: a wave of hoax bomb threats hit at least 21 flights in Europe, Poland's ABW detained six people in a case of weapon components smuggled into Kaliningrad oblast, and Donald Trump, after meeting a Kremlin envoy, said a future deal with Russia "might involve all of Europe". Lithuania's president declined to detail the threats on the border with Kaliningrad oblast, Lithuania said it is ready to host additional US forces, and Russia's foreign ministry promised to factor French-Finnish nuclear cooperation into its military planning. (Previous issue — 5 November 2026, risk 5.3/10.)

Top stories of the day

  1. 05.11 — Europe: hoax bomb threats hit at least 21 flights; a Finnish expert sees a likely hybrid operation. ERR (05.11), citing Yle, SVT, The Guardian, the Financial Times and Flightradar24: on Thursday at least 21 flights between European cities received threats, some were escorted by fighter jets and at least two diverted; no explosives were found. Those affected included two Finnair flights from Helsinki (to Rome and Vienna), an Aer Lingus Dublin–Rome flight (landed in France) and a Wizz Air Milan–Warsaw flight (landed in Vienna). Yle Novosti (05.11): Panu Moilanen (University of Jyväskylä) considers the Wednesday and Thursday wave a likely hybrid operation by a state acting through intermediaries; Russia is the "easy suspect", but "we have no certainty". According to the FT as relayed by ERR, a Russian far-right extremist group claimed the threats against Fiumicino airport. Lithuanian President Gitanas Nausėda (LRT, 06.11) said he has "some information" but cannot confirm Russian responsibility. No flights to the Baltic states are named in the reports. This is the second wave in a week: on 3 November at least seven flights, including to Warsaw, received threats. ⚠️ Contradiction: attribution (see section below). Sources: ERR, Yle, LRT.

  2. 05.11 — Poland: ABW detains six people in the case of a group working for Russian intelligence and smuggling weapon components into Kaliningrad oblast. Statement by special services coordinator Tomasz Siemoniak (gov.pl, 05.11): five Polish citizens aged 25–52 and a 37-year-old Russian woman were detained; the group acted "against the Republic of Poland". InfoSecurity24 (05.11, 09:20): all six are charged with membership of an organised group and illegally exporting weapon components (cartridge cases, projectiles) to Russia without a permit, four also with espionage; a court in Białystok remanded four for three months. According to investigators, the group operated from at least June 2023 to December 2025 in Poland, Lithuania and Russia, moving goods into Kaliningrad oblast in vehicles with hidden compartments; the goods were worth more than PLN 2 million. Since 1 January 2024, Siemoniak said, nearly 100 people have become suspects in ABW espionage and sabotage cases. Sources: Special services coordinator (gov.pl), InfoSecurity24.

  3. 05.11 — US / Russia: after an unscheduled meeting with Kirill Dmitriev, Trump says a deal "might involve all of Europe". TheJournal.ie via AFP (05.11): in the Oval Office Trump told reporters: "It's going to involve more than Ukraine, and I could even say it might involve all of Europe," and declined to say what was discussed. ERR (via AFP-BNS and Reuters) carries the same quote. No terms were named; according to AFP, European commentators fear a shift by Washington towards Moscow. US–Ukraine–Russia talks in Abu Dhabi are still expected on 10–11 November. Sources: TheJournal.ie (AFP), ERR.

  4. 06.11 — Lithuania: Nausėda declines to detail threats on the Kaliningrad border — "by talking too much we do the enemy a favour". LRT via BNS (06.11, 07:09): the president confirmed that troops have been sent in response to the threats and that ways to strengthen protection of the most vulnerable sections are being considered, but declined to disclose intelligence. He linked Poland's sharper public line, which spoke of a prevented provocation, to domestic politics, adding: "It is not my job to judge how the politicians of a neighbouring country behave." Russia, he said, is looking for new ways to destabilise the Baltic states and test NATO's patience, but this does not fundamentally change the threat picture. Source: LRT (BNS).

  5. 05.11 — Lithuania is ready to host additional US forces and has bought Finnish Blocker naval mines. LRT via BNS (05.11, 09:19): Defence Minister Robertas Kaunas told US Ambassador to NATO Matthew Whitaker at the Berlin Security Conference: "Lithuania is ready to host additional US forces"; in the summer just over 100 US troops remained in the country, and in September two battalions were announced to arrive by late October (more than 1,000 in total). Novy Kaliningrad (05.11, 09:20), citing Lithuania's defence ministry and LRT: the Defence Resources Agency signed a contract with Finland's Forcit for Blocker naval mine systems under the Finnish-led Naval Mines Cooperation initiative; the value and quantity were not disclosed. Sources: LRT, Novy Kaliningrad.

  6. 04–05.11 — NATO's eastern flank: an OSINT map shows mass GPS jamming from the southern Baltic to the Black Sea. Defence24 (05.11, 20:00) and Sargs.lv (05.11, via Defence Blog), citing the Italian project ItaMilRadar and AirNav Radar data: on 3 November aircraft recorded markedly reduced GPS accuracy along NATO's eastern border, with the highest concentration near Kaliningrad oblast, on the Polish-Belarusian and Polish-Ukrainian borders, in Romania, Moldova and on the Bulgarian coast. Both outlets stress that the source of the interference has not been officially confirmed; Defence24 calls the Russia hypothesis "very plausible" but unproven and allows that the jamming targets Ukrainian drones. Both publications rely on the same data, so they cannot be treated as independent confirmation of each other. Sources: Defence24, Sargs.lv.

  7. 05.11 — Russia: the foreign ministry promises to factor French-Finnish nuclear cooperation into its "military-political planning". Interfax (05.11, 18:19): foreign ministry spokeswoman Maria Zakharova called Finland's participation in the French initiative irresponsible and accused Helsinki of rapid militarisation; the occasion was the first meeting of a French-Finnish nuclear planning group in Paris on 27 October. Source: Interfax.

  8. 05.11 — Sweden introduces controls at internal Schengen borders for six months from 12 November, citing primarily threats from Russia. LSM (Russian service, 05.11), citing the Swedish government's statement: checks will be selective and last until 11 May 2027; the government speaks of "serious threats to public order and internal security" linked to hybrid threats after Russia's invasion of Ukraine. According to LSM, Russia was not mentioned in the decisions of May 2026 and of 2025. Source: LSM.

By area, in detail

Construction of military facilities and fortifications

  • Estonia. ERR (Russian service, 06.11): the Police and Border Guard Board and Defence Forces intelligence are discussing seismic sensors and fibre-optic distributed acoustic sensing (DAS) to detect tunnels under the border; the country has about 12 seismic stations, and the border guard has no DAS systems yet. Border guards rate the risk of troops being moved through tunnels as low; the Defence Forces say the assessment of the conventional military threat has not changed.
  • Poland. The German embassy (Defence24, 05.11) recalled that German engineering units help build "Tarcza Wschód" infrastructure in Masuria near the border with Kaliningrad oblast. No new official data on the programme's progress were found for the window.
  • Lithuania (item 5): Blocker naval mine purchase. No new window-dated data on Baltic Defence Line bunkers and barriers in Latvia and Lithuania were found.

Deployment and movement of troops

  • Lithuania (items 4, 5): troops at the Kaliningrad border, readiness to host additional US forces.
  • Poland. German embassy in Warsaw (Defence24, 05.11, 16:55; RMF FM, 05.11): Bundeswehr vehicles and soldiers seen in Poland, including the capital, are linked to the Bundeswehr's 71st anniversary and an exhibition for the German Air Force's 70th anniversary and are "purely ceremonial"; the embassy rejected disinformation about interference in Poland's domestic affairs. The trigger was posts by Sejm member Matecki (RMF FM).
  • Estonia. ERR News (05.11), citing Eesti Ekspress: a British corporal at an exercise in Tapa who did not remove his SIM card despite orders had his phone hacked and was blackmailed; a court martial in Catterick demoted him. Whether criminals or a foreign intelligence service were behind the hack has not been established.
  • Exercises: Resolute Reforger 2026 in Latvia continues until 8 November, Latvian NAF drills testing elements of the defence line until 10 November; the "Koalicja" exercise in Poland (Nowa Dęba) runs 9–22 November. Zapad-2026 is not taking place; Ussisõnad-2026 is not independently confirmed. No new Baltic Fleet exercises were found for 5–6 November.

Agreements and spending

  • US — Russia (item 3): Trump's statement on a "big" agreement.
  • Latvia. Sargs.lv (05.11): the NAF, rescue services, companies and NGOs launched a joint resilience campaign, "Mana Latvija. Mana atbildība".
  • Poland. Novy Kaliningrad (05.11) relays Polish experts who believe a permanent US base in Poland may still be built after the Democrats' midterm win.

Military aid and air defence/EW

  • Eastern flank (item 6): GPS jamming.
  • Poland. German embassy (Defence24, 05.11): Germany takes part in policing Polish airspace from bases in Malbork and Mińsk Mazowiecki (Eurofighter) and with Patriot contingents.
  • Space. Yle Novosti (05.11), via Reuters: in October the Russian satellite Kosmos-2612 approached Finnish company Iceye's commercial radar satellite X36, to about 100 m according to US Deputy Secretary of State Thomas DiNanno; Integrity ISR analyst Greg Gillinger said the manoeuvre looked like an attack rehearsal. Russia's defence ministry did not comment.

Kaliningrad and Russian border regions

  • Kaliningrad oblast (item 2): the ABW smuggling case. Novy Kaliningrad (05.11, 14:49), citing the regional government: small craft may go to sea through the Kaliningrad Sea Canal if they follow the transit passage conditions of governor's decree No. 85-u of 25 September (no deviation from the route, automatic position reporting and a radio watch). No reports of Baltic Fleet activity or troop movements were found for the window.
  • Pskov and Leningrad oblasts, St Petersburg: the Russian defence ministry's report for the night of 6 November (142 drones) names no north-western regions (Interfax).
  • Belarus. LRT (05.11): Belarus refused to extradite convicted Antanas Kandrotas to Lithuania. No reports of military activity near the borders of Lithuania, Latvia and Poland were found for the window.
  • Russia's position (item 7): Zakharova on Finland. No official comments from Moscow on the ABW case or on Lithuania's statement about US forces were found for the window.

Statements by officials

  • G. Nausėda, President of Lithuania, 06.11 (LRT): "We often make life easier for enemy intelligence ourselves by talking too much."
  • R. Kaunas, Lithuanian Defence Minister, 05.11 (LRT): "Lithuania is ready to host additional US forces."
  • D. Trump, US President, 05.11 (AFP): "It's going to be a big, beautiful agreement, and everyone's going to be thrilled."
  • M. Zakharova, Russian foreign ministry, 05.11 (Interfax): "We will take the risks this creates into account, including in our military-political planning."
  • T. Siemoniak, Polish special services coordinator, 05.11 (gov.pl): the detained group acted "against the Republic of Poland".
  • German embassy in Warsaw, 05.11 (Defence24): Berlin "stands, and will continue to stand, firmly on Poland's side".

⚠️ Contradictions and discrepancies

  • Who is behind the hoax bomb threats. The FT (as relayed by ERR) reports that a Russian far-right extremist group claimed the threats against Fiumicino; Yle's expert allows for a state hybrid operation through intermediaries; Nausėda says he has information but cannot confirm Russian involvement. These versions are not mutually exclusive; no government has yet confirmed state attribution.
  • Scale of the 5 November wave. ERR speaks of at least 21 flights on Thursday, Yle of a wave "on Wednesday and Thursday"; Reuters counted at least seven flights on 3 November. The counts probably differ by the days covered.
  • GPS jamming. Defence24 lists Latvia and Estonia among affected countries, Sargs.lv (via Defence Blog) does not name them separately; both publications rely on the same ItaMilRadar data, and attribution to Russia is not officially confirmed.
  • Polish and Lithuanian public line on the Kaliningrad border. Warsaw (Tusk, 3 November) spoke of a prevented provocation; Vilnius (Nausėda, 6 November) confirms troop deployments but declines to give details and links the Polish rhetoric to domestic politics. This is a difference in presentation, not in facts.
  • Lithuania's naval mines. Militarnyi earlier wrote of nine countries in the joint mine purchase, Naval News (July 2026) of five (Denmark, Finland, Germany, Lithuania, Norway). Lithuania's contract is known from Novy Kaliningrad's report citing Lithuania's defence ministry and LRT; the value has not been disclosed.
  • No new substantive errors in previous issues requiring a correction log entry were identified.

📊 Escalation risk assessment (0–10): 5.3 / 10

Final score: 5.3 / 10. The closest historical analogue is the tense late Cold War stand-off (≈3–4), with a premium for hybrid pressure, recent drone incursions and the density of military measures near the Suwałki Gap. Below Able Archer 1983 (≈7) and the run-up to 2008/2014 (≈6–7): no use of weapons against NATO territory and no border violations.

Drivers on the side of Russia and its ally:

  • Hybrid pressure: the second wave of hoax flight bomb threats in a week (attribution not established), the ABW case on smuggling weapon components to Kaliningrad, mass GPS jamming along the eastern flank (source not officially confirmed), Kosmos-2612 approaching an Iceye satellite.
  • Rhetoric: Russia's foreign ministry promises to factor French-Finnish nuclear cooperation into military planning.

Drivers on the side of NATO and individual members:

  • Build-up of presence and means: Lithuania invites additional US forces and buys naval mines, Lithuanian and Polish forces are at the Kaliningrad border; Moscow describes such steps as preparation against Kaliningrad.
  • The upcoming "Koalicja" exercise (from 9 November) may provoke a harsh reaction from Moscow.

Mutual / structural factors:

  • Uncertainty in Washington: Trump's words about a deal that "might involve all of Europe", with no terms disclosed, deepen European capitals' fears that their security is being decided without them.
  • Tighter border regimes (Sweden) reflect a growing threat perception across the Baltic Sea.

Stabilisers (both sides):

  • No new incidents: on 5–6 November no drone incursions into the Baltic states and Poland and no border violations were recorded; Russia's north-west is not named in the Russian defence ministry's report.
  • Restrained wording: Nausėda says the threat picture has not fundamentally changed; the Estonian Defence Forces are not changing their assessment of the conventional threat.
  • Negotiation track: the Abu Dhabi talks on 10–11 November remain on schedule, and US–Russian contacts continue.

Rationale: the window was militarily calm but dense with hybrid signals (bomb threats, espionage, GPS). Their growth is balanced by the absence of kinetic events and the calm tone of Baltic militaries; US diplomatic activity is a source of uncertainty in both directions rather than a clear de-escalator.

Delta vs previous issue: = (0.0) — 5.3 (5 November) → 5.3 (6 November). Reason: hybrid pressure rose, but there were no incidents on the borders or in the airspace.

Disclaimer: this is an analytical assessment based on open sources, not a forecast.

Sources