OPINION: The Russian Fog — How Moscow Turns Ukrainian Drones Into Weapons Against NATO

Introduction: June 8, 2026 — a Rafale shoots down a drone over Latvia

One shot, one first, one new reality

On June 8, 2026, Rafale fighter jets of the French Air and Space Force, deployed as part of NATO's Baltic Air Policing mission from Šiauliai Air Base in Lithuania, intercepted and shot down a drone above the parish of Nautrēni, in the municipality of Rēzekne, approximately 30 kilometers from the Russian border. The decision was made by NATO command following confirmation that Russia had employed electronic warfare tactics in the area. It is the first time a NATO aircraft has shot down a drone in Latvian airspace. Not the second. The first.

This is not a footnote. It is a historical marker. Something shifted that morning in the relationship between the war in Ukraine and the security of Alliance members. The drone was not Russian. It was Ukrainian — or at least it had launched under Ukrainian direction, targeting Russian oil infrastructure. It was Russia that redirected it. Toward Latvia. Toward a NATO ally.

Section 1: GPS jamming — how Russia steals Ukrainian drones

Two invisible weapons: jamming and signal spoofing

Russian electronic warfare relies on two distinct techniques. Jamming floods GPS satellite frequencies with high-powered radio signals, blinding the drone's receiver as it loses satellite lock. The drone loses its position fix, falls back on dead-reckoning navigation — which accumulates errors over distance — and drifts. Over the Gulf of Finland, a few kilometers of accumulated error are enough to point a drone toward Estonia or Finland rather than a Russian oil refinery.

Signal spoofing is more surgical. Russian emitters transmit false GPS signals on the exact satellite frequencies, feeding the drone fabricated coordinates. The drone's autopilot believes it is on course — and it is, within its falsified frame of reference. In reality, it is flying toward Latvia or Lithuania. Russia employs the Krasukha-4 and Borisoglebsk-2 systems for these operations, among others. Lithuania documented 36 active jamming emitters in May 2026, compared to just 3 in early 2025, with coverage reaching 450 kilometers from the Kaliningrad enclave.

A documented chronology — from March to June 2026

The facts are precise and public. In March 2026, a cluster of simultaneous incidents documented the mechanics at scale for the first time: Ukrainian drones targeting Russian oil terminals at Ust-Luga and Primorsk on the Baltic coast deviated and entered the airspace of Varėna (Lithuania), Krāslava (Latvia), Auvere (Estonia), and Kouvola (Finland) — four countries in six days. On May 7, 2026, Latvia and Lithuania alerted NATO after two suspected drones crossed from Russia and crashed in Latvia. On May 19, a Romanian F-16 shot down a suspected Ukrainian drone over Estonia. On June 8, the French Rafale at Nautrēni. This is not a series of accidents. It is a pattern.

Finnish Prime Minister Petteri Orpo said it publicly: "Russia has extremely powerful electronic jamming capabilities, which could explain why these drones drift into Finnish airspace." Ukraine itself apologized to Estonia and confirmed having "intelligence on Russia doing this deliberately — these are not abstract claims," according to Ukrainian Foreign Ministry spokesperson Heorhii Tykhyi.

Section 2: The drone as a political instrument — what Russia is really after

The strategic objective behind the technical manipulation

An analyst citing former American General Ben Hodges, quoted in English-language media in June 2026, puts Russia's objective plainly: "Russia is deliberately engineering incidents in NATO airspace. It is trying to create a legal and political crisis within the Alliance, to pressure NATO members into demanding that Ukraine stop its long-range operations, or to create confusion about whether a future Russian attack could be disguised as a stray Ukrainian drone." This strategy yields multiple simultaneous dividends: it weakens support for Ukraine among the allies most directly affected, it tests NATO's response mechanisms, and it establishes a precedent of exploitable ambiguity.

Russia has also spread propaganda claiming the Baltic states are allowing Ukraine to use their airspace for strikes against Russian territory — a documented lie, jointly refuted by the foreign ministers of the Nordic and Baltic states (NB8) in a joint statement: "We categorically reject Russia's blatant disinformation campaign and fabricated accusations. Our territory and airspace have never been used for attacks against targets in Russia."

The political dividend: putting Kyiv on the defensive

Ukraine finds itself in an uncomfortable position. Its closest allies — Estonia, Latvia, Lithuania, Finland — are dealing with incidents linked to its drone operations. Kyiv has been forced to issue public apologies, to send drone expert teams to Romania and the Baltic states to reinforce air defenses, and to affirm that it chooses trajectories that minimize risks to allies. President Zelensky announced on June 3, 2026 the deployment of these expertise teams — a tacit acknowledgment that Ukrainian operations now require allied coordination to manage the fallout.

This is not a Ukrainian capitulation. Ukraine has correctly identified the root cause: not its own drones, but the Russian electronic systems redirecting them. And it continues to strike high-value targets on Russian territory — St. Petersburg, Moscow, oil terminals. But the political pressure on Kyiv to "show restraint" is real, and that is precisely what Moscow is calculating.

Section 3: Surveillance of European nuclear sites — another dimension

144 incidents over 18 months — the IISS documents Russian impunity

On July 2, 2026, the International Institute for Strategic Studies (IISS) published a report analyzing 144 incidents over an 18-month period beginning in late 2024: drones surveilling European nuclear sites across more than a dozen countries, including the United Kingdom, France, Belgium, the Netherlands, Denmark, Germany, Ireland, and Sweden. The IISS concludes that Russian military intelligence (GRU) operated with "substantial impunity." None of the drones were captured or shot down by Western military forces.

Documented incidents include: in November 2024, unusual low-altitude drones over RAF Lakenheath — a British base being prepared to host American nuclear weapons (deployed in July 2025) — and over RAF Fairford. In December 2025, five drones detected above the submarine base at Île Longue in Brittany, which houses France's submarine-launched ballistic missile arsenal. In November and December 2025, intrusions at Kleine-Brogel (Belgium) and Volkel (the Netherlands), where American tactical nuclear weapons are stored. These drones, unarmed, were launched from vessels of the Russian shadow fleet operating with transponders disabled.

Shadow fleet vessels as operational platforms

The IISS investigation identifies several shadow fleet vessels as operational platforms. The Seasons 1 (tanker) and the Hav Dolphin (cargo) are linked to the November 2024 flights above British bases. The Hav Dolphin reappears in May 2025 during incidents above a submarine base in northern Germany. The Boracay (tanker) is seized by French commandos four days after incidents above Denmark in September 2025 — it was carrying a Chinese captain and two Russian nationals employed by the Moran Security Group. The IISS estimates the drones used include Orlan-10 type models, with an operational range of 500 kilometers and autonomy of 12 hours, allowing launches from considerable distances.

Since 2026, European navies have begun seizing shadow fleet vessels more systematically, and significant drone incidents appear to have diminished. But the precedent is set: for 18 months, Russia photographed the interior defenses of some of the West's most sensitive sites from unidentified aircraft, while democracies that preferred discretion over public attribution looked away.

Section 4: Railway crossing closures — a message without words

Seven crossings shut on July 1, 2026

On July 1, 2026, a Russian government decree took effect, closing seven railway border crossings with Finland, Estonia, and Latvia. On the Finnish side: Vyborg, Svetogorsk, Vyartsilya, Lyuttya, and St. Petersburg-Finlyandsky. On the Estonian side: Pechory-Pskovskiye. On the Latvian side: Pytalovo. The order gives no reason. No reopening date. The Russian Foreign Ministry is simply tasked with "notifying" the relevant governments. Finland is left with no open railway crossing with Russia — a country that historically exported fertilizers to Finland by rail.

The decree says nothing. And that is precisely why it says everything. A closure without explanation in a context of acute tensions on NATO's northern flank, just days after Baltic intelligence alerts about imminent provocations, immediately following a series of Finnish-initiated closures on December 14, 2023 — this closure fits the logic of signaling. Russia is reducing its formal connections with its NATO neighbors at a precise moment, without explaining why.

Context: Finland had closed its own border in 2023

Context matters here. Finland had itself closed all land border crossings with Russia in December 2023, after Moscow-instrumentalized migrants were used as a pressure lever. That Finnish decision has been extended indefinitely since. The Russian closure of July 1, 2026 is therefore a mirror response — or rather, a formalization of an existing reality, chosen at a strategically loaded moment. From Meduza to Euronews, analyses converge: none of the Russian-side crossings were still operational except Pechory (Estonia) and Pytalovo (Latvia). This is more symbol than logistical severance. Symbols count.

This gesture is part of a pattern of progressive disconnection between Russia and its NATO neighbors: consulate closures, transport restrictions, reduced air links. Each closure is presented as technical or reciprocal. Together, they form an architecture of chosen isolation.

Section 5: NATO's response — Eastern Sentry and the drone wall

From air policing to genuine air defense

Since 2004, NATO's Baltic Air Policing mission has ensured surveillance of the airspace of Estonia, Latvia, and Lithuania — countries that do not have their own fighter jets capable of doing so. Historically, this mission patrolled. It did not fight. The French Rafale's engagement on June 8, 2026 marks the first time this mission has engaged and destroyed a target. It no longer merely patrols. It defends.

In September 2025, after 19 Russian drones had crossed Polish airspace, NATO Secretary General Mark Rutte launched the Eastern Sentry program — an expanded deterrence mission against Russian incursions. In November 2025, new American counter-drone systems were deployed on the eastern flank. Member states are simultaneously developing a "drone wall" — a chain of sensors, low-altitude radars, and interception systems — along the borders with Russia and Belarus. At the NATO summit in Ankara, Vilnius argued for formally evolving the air policing mission into an active air defense mission.

The gaps that remain — drones that fly low, slow, and small

The IISS report flags a structural problem that NATO cannot ignore. Western defenses are excellent against ballistic missiles, highly capable against combat aircraft, competent against high-altitude drones. They are generally poor against drones flying low, slowly, and small — precisely the profiles used to surveil nuclear sites. Air defense systems are designed for conventional military threats. They have blind spots downward, seaward, along the trajectories a cargo ship can cover from 30 nautical miles offshore.

The deployment of American counter-drone systems on the eastern flank partially addresses this gap. The drone wall under construction addresses it somewhat further. But the IISS's public acknowledgment that Russia overflew sites like Île Longue and Lakenheath with "substantial impunity" for 18 months makes clear that the gaps are real and have been exploited.

Section 6: Lithuania on the front line — 5.38% of GDP for defense

An investment that reflects anxiety

In 2026, Lithuania is spending 5.38 percent of its GDP on defense. It is the highest ratio in NATO — higher than Poland (5 percent), higher than the United States (3.4 percent), and far above the 2 percent long cited as the standard. That figure did not emerge from an accounting decision. It emerged from geography. Lithuania shares 261 kilometers of border with the Russian enclave of Kaliningrad — the source of the 36 GPS jamming emitters. It also shares a border with Belarus, which has permitted Russian drone launches against Ukraine.

In May 2026, a drone triggered a shelter-in-place order in Vilnius, the Lithuanian capital — population 600,000. Authorities eventually concluded it was a Ukrainian drone redirected by Russian electronic warfare. But the shelter order was real. The fear was real. And the lesson for residents was unmistakable: geographic proximity to Russia is not protection. It is a target designation.

The deterrence doctrine — making jamming cost more

Lithuania has developed a two-track response. The first is technological: a partnership with Ukraine to share electronic counter-measure data, and the development of a local startup that announced in June 2026 the raising of €2 million to develop GPS-independent navigation tools — systems that allow drones to fly without depending on satellites that Russia can jam. The second track is political: pushing NATO to formally recognize that GPS jamming is a hostile act, and to establish formal consequences for its use against Alliance members.

That second dimension is the harder one. It requires consensus among 32 allies on what constitutes a threshold crossing. It demands that governments publicly attribute acts that Russia denies, using technical evidence that some prefer to keep classified. That is the debate that will unfold at Ankara — not in plenary, but in the corridors where Alliance policy is actually decided.

Section 7: What this means for the Alliance — Article 5 and the blind spots

Does a Russian-redirected Ukrainian drone trigger Article 5?

This is the legal and political question that nobody wants to articulate aloud, but that everyone is quietly calculating. If Russia deliberately directs a Ukrainian drone against a Latvian city — not accidentally, but as a policy — does that constitute an armed attack on a NATO member? Article 5 refers to an armed attack. A redirected drone is a military instrument whose trajectory has been altered by a hostile power. Several international legal scholars argue that deliberate electronic manipulation can constitute a hostile act under the law of armed conflict. But "can constitute" is not an Alliance policy.

NATO has responded cautiously to date. It scrambled aircraft. It shot down the drone at Nautrēni. It launched Eastern Sentry. It has not formally invoked Article 5 nor issued a collective public attribution of the Russian hostile act. This restraint is understandable in an Alliance of 32 members with varying sensitivities. It is also exactly what Russia is calculating: that the ambiguity of hybrid warfare shields the aggressor as much as it exposes the victim.

Emerging solutions — attribute, deter, respond

Three approaches are emerging in Alliance debates. First, collective attribution: if all members jointly state that Russia is conducting hostile electronic warfare against allied airspace, this creates a public record that supports a future response. The NB8 statement is a beginning. Second, asymmetric response: imposing costs on Russia in domains where it is vulnerable — sanctions on jamming systems, seizures of shadow fleet vessels as already begun in 2026. Third, technical defense: massive investment in low-altitude counter-drone systems, the drone wall, GPS-degraded navigation technologies. All three approaches are underway. None is complete.

What is certain is that the electromagnetic space of NATO's northern flank has become an active operational theater. Not metaphorically. Operationally. French pilots are deciding to pull the trigger over Latvian fields because a transmitter in Kaliningrad lied to a Ukrainian drone. That is the state of the world in July 2026.

Section 8: Shadow fleets — how Russia launches its drones from the sea

Cargo ships that turn off their transponders

The IISS investigation reveals a precise modus operandi: vessels from the Russian shadow fleet — tankers and cargo ships operating with their AIS transponders disabled, known as "dark sailing" — serve as drone launch platforms. These vessels position themselves in international waters near target coastlines, launch drones, and recover them via secondary vessels or allow them to land as circumstances dictate. The technique, developed and refined during the war in Ukraine, has been exported to European operational theaters.

The Orlan-10 model, a Russian reconnaissance drone with a range of 500 kilometers and autonomy of 12 hours, is particularly suited to this mission. Launched from a cargo ship 200 kilometers off the English or French coast, it can reach sensitive military sites, conduct its surveillance, and return before territorial authorities have time to respond. Several shadow fleet vessel seizures by European navies since 2026 have confirmed the presence of Russian nationals and equipment consistent with these operations aboard the ships.

Section 9: Russian propaganda around the Baltic incidents

Inverting reality — turning victims into perpetrators

Russia is not content to provoke incidents. It exploits them narratively. From the first incursions of March 2026, Russian state media claimed that the Baltic states were allowing Ukraine to use their airspace as a strike corridor against Russia — a documented lie refuted by the official communications of four countries. Russia also filed complaints with international organizations on the theme of Baltic "complicity" in the war. This narrative has two targets: an uninformed international public, and the West's more hesitant allies, whom Moscow hopes to weaken on their support for Ukraine.

The NB8 foreign ministers — the eight Nordic and Baltic countries — published a joint statement rejecting "categorically" these accusations, affirming that "the incidents involving drones entering NATO airspace are a direct consequence of Russia's illegal war of aggression against Ukraine." That collective clarity matters. It strips Russian narrative strategy of the ambiguity it needs to function.

Section 10: Romania and the Black Sea — another electronic front line

A Ukrainian naval drone explodes in the port of Constanța

On June 5, 2026, a Ukrainian naval drone lost control under the effect of Russian electronic warfare during an operation in the Black Sea and drifted toward the Romanian coast, where it exploded in the port of Constanța. The Ukrainian Navy acknowledged the loss, explicitly attributing the incident to "enemy electronic warfare measures." Romanian President Nicușor Dan confirmed that Ukraine had shared information to assist with area evacuation. No casualties were reported, but the incident is part of a pattern: 16 drone incursions into Romanian airspace in the first five months of 2026, representing more than half of the 29 total incursions since February 2022.

The Black Sea is a particularly active electronic warfare theater since Ukraine developed its naval drone capabilities to contest Russian dominance. Russia deploys jamming and lure systems from its coastline and naval vessels, creating an electromagnetic disruption zone that affects not only Ukrainian drones but also the civil and military navigation of NATO littoral states.

Section 11: The impact on civilian populations — what ordinary people are living through

Shelter alerts in Baltic capitals

In May 2026, the residents of Vilnius received an emergency alert on their phones urging them to take shelter due to unidentified drone activity. The Lithuanian capital, population 600,000, is not a city at war. It is on no conventional combat front. And yet ordinary people sought shelter in their basements, in interior corridors, waiting for the alert to be lifted. Days earlier, similar alerts had been issued in Latvia and Estonia. These alerts are not drills. They are responses to threats assessed as real, in the moment, by military authorities who do not have the luxury of time.

A Lithuanian columnist writing in The Guardian, who personally experienced one of these alerts, put it soberly: "A drone set off an alert on my phone — we had to shelter. This is the new reality on NATO's eastern flank." This gradual normalization of shelter alerts in Baltic cities is, in itself, a cost of hybrid warfare — a cost that appears in no military ledger, but is paid daily in civilian anxiety.

Section 12: What non-Baltic allies still don't fully understand

The psychological distance between Berlin and Vilnius

There is a fundamental difference between how Russian hybrid warfare is perceived in Berlin, Paris, or Rome, and how it is lived in Vilnius, Riga, or Tallinn. For a Western European decision-maker, the Rafale incident at Nautrēni is an interesting defense news item. For a Latvian, it is their airspace, their land, their fellow citizens who watched the machine fly overhead. This difference in perception translates into a difference in political priorities. The Baltics want counter-drone systems deployed immediately. Some allies prefer the process of consultation. Russian electronic warfare plays in the gap between urgency and deliberation.

The 2 percent of GDP as the minimum defense spending threshold for NATO was a twenty-year political fight. Lithuania is already at 5.38 percent. Poland at 5 percent. This is not warmongering enthusiasm. It is geography translating into budgets. Allies further from the Russian border have the luxury of debating the threat level. The Baltics lost that luxury in 2022.

Section 13: Ukraine's lessons — adapting electronic defenses

What Ukrainian experience is teaching NATO

Ukraine has been the world's laboratory for electronic counter-warfare since 2022. It has developed GPS-degraded navigation techniques, flight trajectories that minimize exposure to jammers, and real-time drift correction systems. Zelensky announced on June 3, 2026 the deployment of Ukrainian drone expertise teams to Romania and the Baltic states — a form of reverse technology transfer in which a country at war is training its allies at peace on the realities of contemporary electronic combat. This relationship, initially unilateral (the West supplied weapons, Ukraine fought), is becoming bilateral: Ukraine is sharing lessons that NATO has not acquired any other way than in theory.

The Lithuanian startup raising €2 million to develop GPS-independent navigation tools follows this same logic. It is not reinventing the wheel. It is adapting solutions that Ukrainian engineers developed under operational pressure. This is necessity-driven innovation, passed on. And it is precisely the kind of exchange still systematically missing from NATO's formal structures — which are too slow to integrate real-time combat lessons.

Conclusion: The specter of the electromagnetic spectrum

What Nautrēni says about our moment

On June 8, 2026, at 07:05 GMT, a French Rafale shot down a drone above Nautrēni — a village that most people cannot find on a map. It did so because NATO command assessed that Russia had used electronic warfare to bring that drone into allied territory. That act, taking mere seconds, is the summary of an invisible war that has been fought for months in the electromagnetic frequencies of the Alliance's northern flank.

Two imperatives that tolerate no delay

The first imperative is technical: fund low-altitude defenses massively, close the blind spots the IISS report has exposed, and deploy GPS-degraded navigation technologies so that allied drones can no longer be stolen by Russian electronic warfare. The second is political: build Alliance consensus that hostile GPS jamming is a military act deserving a formal response — not just quiet scrambles, but public attribution and documented consequences. Russia understood before we did that the electromagnetic spectrum is a theater of war. It is time the Alliance integrates that into its doctrine at the speed this theater is evolving.

By Maxime Marquette, columnist

Columnist's transparency note

Editorial posture

This article is based on open sources dated between May and July 2026: Reuters (June 8, 2026), the Washington Post (June 8, 2026), United24 Media (June 8, 2026), The Guardian (July 2, 2026 and June 10, 2026), AirVeto (June 8, June 3, and June 15, 2026), Euronews (June 8 and July 1, 2026), the IISS report on surveillance of European nuclear sites, and official statements from the Latvian, Estonian, and Lithuanian defense ministries. I am pro-Ukraine and pro-NATO. This posture shapes my angle, not my facts. The Russian electronic warfare documented here is attributed on the basis of official statements by NATO member governments and Ukraine — not personal inference.

Limits

The technical details of Russian electronic warfare systems are not fully public. Identifications of "Ukrainian" drones rest on assessments by Baltic governments that have not all published their complete evidence. The IISS report on the surveillance of nuclear sites is an analysis of correlated incidents, not direct proof of Russian command in every individual case. I distinguish throughout this article between what has been officially confirmed and what is inferred.

Sources

Primary sources

Reuters — Latvia's military issues alert over drone incursion — June 8, 2026

United24 Media — Russia is redirecting Ukrainian drones into NATO airspace — June 8, 2026

The Guardian — Russia mounted drone surveillance of European nuclear sites over 18 months — July 2, 2026

Euronews — Russia closes railway border crossings with Finland, Estonia and Latvia — July 1, 2026

Secondary sources

AirVeto — Why Ukrainian Drones Keep Ending Up in NATO Airspace — June 15, 2026

Moscow Times — Russia closes railway border crossings with Finland and Baltic neighbors — July 1, 2026

Wikipedia — 2026 Ukrainian drone incursions into the Baltic states and Finland