Bomb threats disrupt at least 25 flights across Europe, raising hybrid war fears
Coordinated bomb threats disrupted at least 33 flights across Europe this week, forcing emergency landings and diversions, and raising fears of 'hybrid warfare' tactics.
Intelligence analysis by Gemini 2.5 Flash

A series of hoax bomb threats targeted numerous European flights, causing widespread disruption and prompting investigations into a potentially coordinated effort to sow chaos. Officials are concerned these incidents, alongside other cyber-attacks, represent a new form of 'under-threshold warfare' designed to destabilize without direct attribution.
Imagine someone keeps calling in fake fire alarms at different schools just to cause a big fuss, make everyone leave, and waste the firefighters' time. That's kind of what's happening with planes in Europe. Someone is making fake bomb threats, causing flights to land early or be searched, which makes travel messy and costs airlines a lot of money, even though there's no real danger.
Analysis
The recent wave of bomb threats targeting European flights represents a significant escalation in what some officials are terming "under-threshold warfare." This coordinated disruption, affecting at least 33 flights across numerous countries and airlines, highlights profound vulnerabilities in civilian infrastructure to non-conventional attacks. While no actual explosives were found, the economic and psychological impact of such hoaxes is substantial, forcing emergency landings, diversions, and extensive security checks. This type of incident places a considerable burden on aviation authorities and airlines, leading to delays, cancellations, and increased operational costs, which ultimately affect passengers and the broader economy. The lack of clear attribution, as noted by Italian defence minister Guido Crosetto, is a deliberate feature of this "under-threshold" strategy, designed to sow chaos without triggering a conventional military or diplomatic response. The repeated nature of these threats, occurring over several days, suggests a sustained campaign rather than isolated acts, demanding a robust and coordinated international response to safeguard critical transport networks.
Male State
The purported involvement of "Male State," a Russian far-right, ultranationalist, and misogynistic movement, as the source of some emailed threats adds a complex geopolitical dimension to these incidents. While the group's founder, Vladislav Pozdnyakov, has not claimed direct responsibility, the content of the emails, referencing a "feminist regime" and threatening to "make history," aligns closely with the group's extremist ideology and anti-Western rhetoric. This potential link raises serious concerns that state actors might be leveraging or tacitly supporting non-state groups to execute disruptive campaigns, thereby maintaining plausible deniability. The weaponization of extremist ideologies to destabilize Western nations through non-military means represents a growing threat, exploiting societal divisions and vulnerabilities to achieve strategic objectives without direct military confrontation. Such tactics complicate international relations and make it harder to formulate a unified response.
33 Flights
The sheer number of affected flights—at least 33 across Europe within a single week—underscores the scale and coordinated nature of this campaign. This is not merely a series of isolated pranks but a concerted effort to overwhelm security systems and instill widespread fear among the traveling public. The disruption impacted major carriers like Ryanair, Aer Lingus, and easyJet, and spanned countries from Italy to Finland, demonstrating a wide operational reach and sophisticated planning. Each incident, though ultimately a hoax, necessitated costly and time-consuming security protocols, including emergency landings, passenger evacuations, and thorough searches of aircraft and baggage. The cumulative effect of these disruptions on airline schedules, passenger confidence, and airport operations represents a tangible economic cost, impacting tourism, business travel, and supply chains, even in the absence of a physical attack. This sustained pressure on the aviation sector could lead to long-term economic consequences if not effectively countered.
Guido Crosetto
Italian defence minister Guido Crosetto's characterization of these events as "under-threshold warfare" provides a crucial analytical framework for understanding their broader implications. He explicitly stated that such actions are designed to operate "below the attribution threshold," making it exceedingly difficult to assign blame definitively to a specific state or entity. This strategy aims to create widespread societal and economic disruption without crossing a line that would provoke a direct, conventional military or diplomatic retaliation. The minister's comments, linking the flight threats to earlier cyber-attacks on supermarket refrigeration systems and blood supplies in France, suggest a broader pattern of hybrid attacks targeting critical civilian infrastructure across Europe. This type of warfare seeks to erode public trust in government and institutions, strain emergency resources, and create internal divisions, posing a significant and evolving challenge to national security and economic stability across the continent. The ambiguity inherent in these attacks makes them particularly insidious and difficult to deter.
Key points
- At least 33 flights across Europe were disrupted by hoax bomb threats this week.
- Incidents involved major airlines like Ryanair, Aer Lingus, and easyJet, spanning numerous countries.
- No suspicious items were found on any of the searched aircraft.
- Italian defence minister Guido Crosetto described the events as 'under-threshold warfare,' designed to cause disruption without clear attribution.
- Some threats were signed 'fighters of the Male State,' a Russian far-right ultranationalist movement.
Authorities across Europe are actively investigating the coordinated threats, with global aviation bodies urging identification of the origin. A successful investigation could lead to the perpetrators being caught, deterring future incidents and allowing for the implementation of more resilient security protocols.
If the perpetrators of these 'under-threshold warfare' tactics remain unidentified, the continued disruption could escalate, leading to significant economic damage for the aviation sector, eroding public trust in air travel security, and potentially inspiring further hybrid attacks on critical infrastructure.



