Back in September 2025 the German federal security services published a very timely template. Foreign intelligence, mostly Russian, will use untrained recruits called “Wegwerf-Agenten” through social media and messenger apps, the same platforms the FBI flags Russian services for exploiting. Small sums will be paid for tasks of arson, sabotage, and attacks on energy, transport, and rail infrastructure.
The disclosure of a risk from cells of coin-operated online recruits, suggests there already is a foundation of knowledge about who will commission them, when and why. Read the joint BKA, BND, BfV, and BAMAD announcement, given how the Russian links are practically erupting off the pages as if a Vulkangruppe.
Now read the new “Kommando Angry Birds” communique. The cell fits the same operation template as was predicted last year.
In its claim letter posted to indymedia, the cell says it deposited timed incendiaries built on a liter of grill lighter fluid in two cable ducts at the Wupper bridge:
…verantwortlich “für die Sabotage der Bahnstrecke nördlich von Leverkusen”… ein “Massensterben” durch die “technologische Eskalation”… “die Beseitigung der industriellen Technologie geboten”…
EN: (responsible “for the sabotage of the railway line north of Leverkusen”… a “mass death” due to “technological escalation”… “the elimination of industrial technology is necessary”…)
Birds of Russia
We are talking here about a documented Russian model, which has been named and described by four German federal agencies.
| Source | What it establishes | Link |
|---|---|---|
| BfV press release, 2 Sep 2025 | Perpetrators presumed Russian; recruitment via social media for sabotage in Germany | verfassungsschutz.de |
| BND press release | Same joint finding; four-agency campaign “Kein Wegwerf-Agent werden” | bnd.bund.de |
| BKA press release | Names the target class: energy, transport, rail, logistics, ICT, military, defense industry | bka.de |
| BfV short notice | Recruits paid small sums, often ignorant of their true principals; heavy criminal penalties | verfassungsschutz.de |
| BAMAD via Bundeswehr | Military counterintelligence co-signs: a harmless chat, a small job, a little money, and you are committing sabotage for a foreign power | bundeswehr.de |
It’s not a mystery. The Bundesamt für Verfassungsschutz and the Bundesnachrichtendienst both state that the perpetrators are presumed Russian services, working directly or through intermediaries, using social media and messenger apps to recruit their own angry birds for sabotage against Germany. The Bundeskriminalamt lists the target set: energy, transport and traffic, logistics, information and communications technology, military sites, and the defense industry. It’s all critical infrastructure, chosen for leverage against Ukraine, not for any coherent ideology.
Pattern Time
The question is whether its operation fits the Russian low-level-agent template, which would move the case to counterintelligence and active defense against a foreign actor, or an actual German domestic scene. And that begs the elephant in the room, why Germany just proposed federal counterintelligence to be used against domestic political groups, without any real threat validation step.
The template column below is drawn from the federal sources linked in the ledger. The Kommando column is the attack record as attributed by NRW authorities and claimed in the communiques.
| Marker | GRU agent template | Kommando Angry Birds |
|---|---|---|
| Commissioning state | Mostly Russian services, direct or via intermediaries | Unattributed; zero convictions across the campaign |
| Target class | Energy, transport, rail, logistics, ICT, military, defense industry | Rail signal cabling, telecom masts, a substation, a road tunnel |
| Recruitment channel | Social media and messengers, tasks framed as a game or challenge | Name taken from a mobile game; manuals published openly |
| Recruit awareness | Often does not know the true principal | Cell structure and size listed by authorities as unknown |
| Force multiplication | Disposable recruits, seeded and replaced | Distributes incendiary-device instructions to enable others |
| Naming convention | Cover chosen for local plausibility, not authored belief | No date, no martyr, no class term; a global consumer brand |
| Strategic beneficiary | Degradation of German infrastructure and public trust | Closes Germany’s densest logistics corridors, affecting Ukraine and NATO, feeds false “left terror” narrative |
As I had to explain already with the Vulkangruppe, left cells will use names to invoke a date, a martyr, or a class term. A temporal frame of justice is the kind of thing inherent to being credible as the left. Bewegung 2. Juni. Kommando Holger Meins. Revolutionaere Zellen. Imagine a Nazi cell posting a letter signed “Castle Wolfenstein Semites”.
A tech-promoting mobile slingshot game franchise, whose flagship indoor park stood in a St. Petersburg shopping mall flogging Angry Bird merch, fails that test in the most painfully obvious way. So, either these are the least self-aware Germans in history, or the cynical Russians are up to their usual childish humor mocking their own coin-operated disposable assets. It’s the kind of dumb joke someone playing a lot of Angry Birds in May 2023 would make (revenge for sanctions).
If you are actually opposed to technology and could choose anything for your own name, to sign your own work… it’s not going to be the promotion of an addictive ad-revenue mobile app still heavily merchandised in St. Petersburg.
Template as Predictor
The German agency template warned us about this exact attack signature, which a domestic anarchist profile simply doesn’t fit.
- It predicts a cell with no pre-war history, appearing inside the window of GRU escalation in Germany.
- It predicts targets chosen from the federal list rather than from vote share or class enemy.
- It predicts a name coded wrong for the milieu it claims.
- It predicts published manuals, because the point is to seed easy replacements, not to protect a loyal or closed cell.
- It predicts arrests that go nowhere, because intelligence equities foul the prosecution. Rail signal cabling in the Duesseldorf corridor, telecom masts in Langenfeld and Erkrath, a substation, a road tunnel, and nearly four years without a single conviction.
See what I mean?
A Dobrindt Discriminator
The authorship as it is published and the direction are not the same, so we should discriminate them easily. The communique can read as authentic for an asset’s experience, and yet the operation including influence still may be commissioned from Moscow. A recruit simply gets handed a cover story and swag along with their crypto.
The test comes with arrest.
A genuine anti-civilization actor produces a defendant who theorizes in court. A disposable one produces evidence, especially if you can intercept the trail before it’s burned.
Fifteen years of Vulkangruppe produced neither, because no one was convicted. “Kommando Angry Birds” is now running the clock, along with a sale of 30 to 50 percent off in the Angry Birds Russia brand store. Yet the German services have already told us what time it is. The question Germany should be asking is whether they can defend using tools at the ready, or its ultra conservative politicians like Dobrindt will hold them back, falsely blaming “leftists”, the tactic Putin runs to push extremist right politicians into control.
