Russian Spies Allegedly Plot to Assassinate German Drone Executive

www.digi24.ro

Russian Spies Allegedly Plot to Assassinate German Drone Executive

First seen 6 Aug 2026, 12:37 UTC • •72.5

Article Content

1 / 3

Browse articles

ThreatCluster •August 7, 2026 at 10:56 UTC

•Russian intelligence allegedly planned an assassination of a German drone executive.
•Two suspects were arrested, including a Romanian woman and a Ukrainian man.
•The operation was thwarted due to timely alerts from allied intelligence agencies.

Russian intelligence services reportedly orchestrated a plot to assassinate Stefan Thumann, CEO of German drone manufacturer Donaustahl. The plan was thwarted by German security forces following alerts from allied intelligence agencies. Two suspects, a Ukrainian man and a Romanian woman, were arrested for surveillance activities conducted from December 2025 to March 2026. They monitored Thumann's movements, photographing his residence and workplace. Despite initial arrests, one suspect escaped to Spain, complicating the investigation. German authorities have classified the case as a 'presumed planned assassination,' although formal charges focus on espionage activities. Thumann is currently under heightened security protection.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 45d ago How this analysis works

Timeline

2025-12-01

German intelligence receives warning about Thumann

Allied agencies alerted German authorities about a potential threat to Thumann's life, prompting increased surveillance.

2026-03-01

Operation leads to arrests in Spain and Germany

German police arrested Serhii N. in Spain and Alla S. in Germany after monitoring activities were uncovered.

2026-08-06

Articles published detailing the assassination plot

Both Digi24 and Ziare.com reported on the thwarted assassination attempt and the arrests made.

More articles in this cluster (2)

Threat Graph

4 entities, 3 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Organization (2)

Donaustahl
Rheinmetall

Indicator (2)

digi24.ro
ziare.com

Relationships

Donaustahl related to Rheinmetall
Donaustahl related to digi24.ro
Donaustahl related to ziare.com

Following this threat?

Track Donaustahl in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API…

Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation A critical vulnerability (CVE-2025-39682) in the Linux kernel allows remote code execution through mishandling of zero-length TLS records. This flaw affects kTLS-enabled hosts running vulnerable kernel versions, exposing them to attackers without authentication. CISA added this vulnerability to its Known Exploited…