Polish authorities have charged five men in an alleged Russia-orchestrated plot to send out parcels with explosives to various Western countries, Poland's National Prosecutor's Office announced on Jan.

Nato allies have also intercepted some ships from Russia’s so-called shadow fleet of oil and cargo ships that Moscow has used to evade western sanctions. Swedish authorities boarded one cargo vessel under sanctions in December, and Baltic nations reported six suspicious cable incidents within six days earlier this month.

Researchers on Friday said that Poland’s electric grid was targeted by wiper malware, likely unleashed by Russia state hackers, in an attempt to disrupt electricity delivery operations.

Ukraine informed neighbouring Poland that Russia could deploy the Oreshnik missile system when it launched its large-scale attack on the night of 8-9 January.

Security researchers have attributed the attempted use of destructive "wiper" malware across Poland's energy infrastructure in late December to a Russian-backed hacking group known for causing power outages in neighboring Ukraine.

Reported visit underscores close intelligence coordination between Warsaw, Washington at a time of persistent regional instability - Anadolu Ajansı

A cyberattack targeting Poland's power grid in late December 2025 has been linked to the Russian state-sponsored hacking group Sandworm, which attempted to deploy a new destructive data-wiping malware dubbed DynoWiper during the attack.

The suspects are accused of planning to send parcels containing incendiary devices and explosive substances to Western countries, including the

Polish Prime Minister Karol Nawrocki said that US President Donald Trump is the only world leader who is capable of stopping Vladimir Putin to counter Europe’s threat. He added that Russia has been threatening his country as well as central and eastern Europe.

Fast forward a decade and Sandworm continues to target entities operating in various critical infrastructure sectors, especially in Ukraine. In their latest APT Activity Report, covering April to September 2025, ESET researchers noted that they spotted Sandworm conducting wiper attacks against targets in Ukraine on a regular basis.