Lithuanian authorities have uncovered a sophisticated espionage network linked to Russia that allegedly plotted two targeted assassinations on Lithuanian soil. The operation, which involved a multinational web of operatives and financial intermediaries, was disrupted by police before the attacks could be carried out, marking a significant escalation in the reported efforts by Russian intelligence to silence critics and political opponents within the European Union.
At the heart of the investigation is a complex conspiracy involving at least seven individuals. The targets were identified as a 46-year-aged activist from a Russian republic who had been granted political asylum in Lithuania, and a prominent Lithuanian political advisor known for his vocal anti-Russian rhetoric. The plot highlights a growing trend of “transnational repression,” where foreign intelligence services target dissidents living in exile.
The scale of the operation suggests a high level of coordination, utilizing surveillance technology, electronic intrusions, and a financial pipeline that stretched from Greece to Russia. While several arrests have been made, including a high-profile detention in Greece, investigators believe the primary architects of the plot may still be operating from other European capitals, including Germany.
The Thessaloniki Connection and Legal Battles
A pivotal development in the case occurred on February 10, when a 55-year-old man of Greek origin from Georgia was arrested at his home in Thessaloniki. The arrest was executed under a European Arrest Warrant, charging the man with collaborating with a Russian agent network and aiding a foreign power in conducting hostile actions against Lithuania.
The legal process in Greece has been fraught with tension. The Thessaloniki Court of Appeal has already ruled that the man must be extradited to Lithuania to face charges. However, the suspect has denied all allegations and argues that his life would be in danger if he were handed over to Lithuanian authorities. Legal experts expect the case to move to the Greek Supreme Court, which will hold the final authority over his extradition.
According to court documents, the suspects utilized a network of intermediaries to move funds. In one specific instance, on February 20, 2025, two Greek citizens residing in Georgia allegedly used an international money transfer company with an office in Thessaloniki to send funds to another Greek national living in Russia. This financial trail is central to the prosecution’s effort to link the local operatives to their handlers in Moscow.
Surveillance and the Mechanics of the Plot
The level of preparation involved in the plot reveals a meticulous approach to intelligence gathering. The targets were not merely identified but were actively monitored through a combination of physical and digital surveillance. Investigators found that the suspects exchanged photographs and videos of the targets to coordinate the strikes.
The surveillance of the Lithuanian political advisor was particularly invasive. Police discovered a listening device—a GPS and audio bug—hidden beneath the hood of his car to track his daily movements. This physical surveillance was supported by a team of at least four individuals who used cameras mounted on vehicles to record the advisor’s activities. Simultaneously, the Russian-linked network allegedly breached the electronic systems of the political activist, gaining access to private data to refine the timing and location of the planned attacks.
The plot was finally dismantled on March 12 of last year, when Lithuanian police launched a coordinated operation to arrest the suspects before they could execute the killings. The timing of the intervention prevented what authorities describe as a direct attack on the sovereignty and security of the state.
Financial Incentives and Operative Roles
While the Greek nationals involved are not viewed as the primary architects, they played a critical role in the logistics and coordination of the hits. The financial structure of the conspiracy was designed to incentivize both the organizers and the executors:
| Role | Proposed Payment | Status |
|---|---|---|
| Hired Assassins | €40,000 | Unpaid |
| Plot Organizer | €10,000 | Unpaid |
| Preparatory Actions | €5,000 | Paid (Passports/Travel) |
The €5,000 already disbursed was intended to cover “preparatory actions,” which included the procurement of fraudulent passports and the travel expenses for the assassins to enter Lithuania. One suspect with a Greek name was specifically tasked with recruiting a Lithuanian national to procure the weapons for the murders, though that specific mission was never completed.
A Multinational Network of Influence
The diversity of the individuals named in the indictment underscores the global reach of Russian intelligence operations. The network was not limited to a single nationality, but rather a curated group of operatives with varying degrees of loyalty and citizenship.
- Greek Nationals: Four individuals of Greek origin, including one holding dual Greek and Russian citizenship.
- Other Nationalities: The indictment includes citizens from Georgia, Ukraine, Belarus (two individuals), and Lithuania (two individuals).
- The “Mastermind”: Evidence suggests a person with dual Greek and Russian citizenship played a senior role, while the primary suspect is believed to be currently residing in Germany.
This structure allows intelligence services to create “plausible deniability” by using third-country nationals to conduct operations, making it harder for counter-intelligence agencies to link the activity directly to the Kremlin. However, the use of European-based financial hubs like Thessaloniki suggests a reliance on the openness of the Schengen Area to move operatives and money.
Broader Implications for European Security
The plot to kill a political advisor and a refugee activist is part of a wider pattern of Russian aggression within the EU. By targeting individuals who provide strategic advice to governments or those who expose Russian state crimes, Moscow seeks to create a “chilling effect” among the diaspora and political circles in the Baltics. Lithuania, as one of the most outspoken critics of the Kremlin, has become a primary theater for these clandestine activities.
The ongoing investigation now focuses on the “missing links”—the individuals still at large in Germany and other European nations. The coordination between the Lithuanian State Security Department and European police forces remains critical as they attempt to map the full extent of the network’s reach.
Disclaimer: This report is based on ongoing legal proceedings and indictments. All suspects are presumed innocent until proven guilty in a court of law.
The next critical legal milestone will be the ruling of the Greek Supreme Court regarding the extradition of the 55-year-old suspect to Lithuania. This decision will likely determine whether the prosecution can secure a full confession or further intelligence on the network’s leadership.
We invite our readers to share their thoughts on this developing story in the comments below or share this report on social media to increase awareness of transnational security threats.
