CIA Warns Europe of Russian Plot to Launch Attack Drones from Mediterranean Cargo Ships

The global supply chain relies on the premise that a standard shipping container holds commercial goods, a vulnerability that remains largely unchecked in international waters. The CIA has now warned European governments that Russia plans to exploit this exact blind spot, plotting to launch attack drones from commercial merchant vessels in the Mediterranean Sea to strike targets in Spain, France, and Italy.[1][2]

The intelligence assessment, first reported late Wednesday by the Spanish daily El Mundo citing Lithuanian defense sources, details a strategy to bypass NATO's heavily fortified eastern flank. By moving the launch point to the sea, Moscow could strike Western European nations that have historically felt insulated from the immediate kinetic fallout of the Ukraine conflict.[3][4]

The plot relies on the Gerbera drone, a relatively small unmanned aerial vehicle with a 2.5-meter wingspan. Capable of carrying a four-to-five-kilogram explosive payload, the drones can travel up to 600 kilometers at speeds approaching 160 kilometers per hour. Their compact size allows them to be easily concealed within standard cargo containers and launched via catapult from the decks of civilian-flagged ships.[2][3]

"They will use drones launched from the sea and hidden in cargo containers. It's not difficult at all," an anonymous source close to Lithuania's Ministry of Defence told El Mundo. The operational concept allows a vessel to remain in international waters, deploying the drones from up to 300 kilometers offshore, giving the munitions a flight time of roughly two hours before reaching coastal infrastructure.[4][5]

While a five-kilogram warhead lacks the destructive power to level military installations, the strategic goal is asymmetric disruption. A successful strike could ignite fires at petrochemical sites, damage exposed port infrastructure, or force the temporary closure of major commercial airports. Spain, France, and Italy—all of which provide military assistance to Ukraine and face upcoming elections—were explicitly named in the intelligence circulation.[2][4]

The intelligence sharing follows an unannounced August 2026 visit to Moscow by CIA Director John Ratcliffe. Traveling aboard a U.S. military aircraft on August 25, Ratcliffe reportedly met with Russian intelligence chiefs to deliver a direct warning against miscalculations that could trigger a broader NATO response. By mid-September, the CIA's assessment was circulating among European foreign ministries.[2][3]

The timeline of the intelligence aligns with sudden high-level security meetings in Paris. On September 16, French President Emmanuel Macron convened an emergency session of his Defense Council. Two days later, Macron summoned the leaders of all French political parties and prospective 2027 presidential candidates to the Élysée Palace for closed-door briefings regarding national security.[2][4]

British defense analyst Keir Giles noted that the Mediterranean strategy targets nations that have not prioritized the dense air defense networks now standard in Eastern Europe. "It's not necessarily the frontline countries that will be targeted," Giles said. "The target will be wherever Europe's weakest point is," pointing to nations that "have not invested in integrated air and missile defence systems adequate to the Russian threat."[4][5]

The Mediterranean plot represents an escalation of a gray-zone campaign already underway across the continent. In February 2026, a Swedish Navy vessel detected and jammed a drone taking off from a Russian intelligence ship in the Öresund Strait. More recently, German authorities concluded a month-long investigation into an August incident where an explosive-laden drone collided with an aircraft at Leipzig airport, officially attributing the attack to Russia.[3][5]

Because these actions fall below the threshold of declared war, they complicate a unified NATO military response. European coastal states must now decide whether to implement aggressive boarding and inspection protocols for suspected Russian shadow fleet vessels transiting the Mediterranean, a move that would fundamentally alter maritime freedom of navigation but could be the only mechanism to intercept a container-launched strike before it takes flight.[3][4]