German investigators are examining whether a cargo ship from Russia’s so-called “shadow fleet” may be connected to a series of mysterious drone flights over northern Germany in late September. These incidents disrupted civilian air traffic and raised fears of Russian hybrid operations in the Baltic region.
According to Spiegel, the investigation focuses on a 100-meter cargo vessel that was anchored in the Kiel area, in the maritime zone adjacent to the state of Schleswig-Holstein, when several drones were sighted over sensitive sites and infrastructure.
Sources within the German security services told the outlet that the ship’s route and unusual behavior correspond with the timing and location of the drone flights. Intelligence officials believe the drones—including one with a wingspan exceeding four meters—could have been launched from or coordinated with the vessel.
“The available data on movement patterns, communication activity, and proximity to drone sightings give us reason to assume a potential link,” one investigator told Spiegel.
Drones With Military-Grade Capabilities
Eyewitnesses and radar data confirmed that multiple drones, including a large fixed-wing model resembling a small aircraft, were observed flying over strategically important infrastructure in Schleswig-Holstein. The flight path included energy facilities, ports, and communication nodes in the region—all of which are key elements of Germany’s national security network.
Experts say the cargo vessel under scrutiny has the technical capacity to serve as a launch and recovery platform for such drones, using shipboard modifications like flat decks and nets for sea landings.
The ship reportedly flew the flag of a Caribbean nation, a common tactic among vessels in Russia’s “shadow fleet” to obscure ownership and circumvent sanctions.
After leaving Kiel Bay, the vessel headed east and entered a Russian port within several days, reinforcing suspicions that it may have been part of a wider operation involving Russian intelligence or defense-linked logistics.
“Shadow Fleet” Under European Scrutiny
The case comes amid a wave of European investigations into Russia’s covert maritime operations. The so-called “shadow fleet” consists of hundreds of tankers and cargo ships that operate under false flags, obscure registries, and deactivate their transponders—allowing Moscow to move oil, materials, and intelligence assets beyond Western oversighMany of these vessels have been linked to evading sanctions, while others are suspected of being repurposed for hybrid missions that involve surveillance or electronic warfare.are.
Earlier this month, French authorities detained the Boracay oil tanker off the coast of Saint-Nazaire. The ship, also associated with the “shadow fleet,” is now part of an ongoing investigation into possible involvement in drone operations over Denmark, which caused the temporary closure of Copenhagen and Oslo airports.
Berlin Weighs New Countermeasures
In response to the growing drone threat, the German government is now considering allowing the Bundeswehr to shoot down unidentified drones in civilian airspace under defined emergency conditions.
Interior Ministry officials have already begun consultations with the Defense Ministry and the Chancellor’s office on revising legal frameworks that currently restrict military intervention in domestic airspace.
The issue gained urgency after Munich Airport had to suspend operations on the night of October 3 due to new drone reports—the latest in a chain of similar incidents across Europe in recent weeks.
Analysts warn that Germany, as Europe’s central transport hub and NATO logistics corridor, may be facing a sustained campaign of hybrid pressure from Russia, intended to test vulnerabilities and erode confidence in air and maritime security systems.
For Berlin, this investigation marks the first time such suspicions have directly involved German airspace and territorial waters, illustrating that Moscow’s operations are no longer confined to the Baltics or Scandinavia.
While officials caution that final conclusions will depend on forensic and satellite data, European counterintelligence services now view the Baltic Sea as one of the most active arenas of Russian hybrid activity since the beginning of the full-scale war in Ukraine.
