Kremlin insider Andrei Fedorov warned on BBC's Newsnight that Russia is already engaged in a proxy war against the United Kingdom. Following the UK's decision to supply Storm Shadow missiles to Ukraine, Fedorov suggested that future Russian retaliation would be carried out by "unknown sources" to maintain plausible deniability.

Advertisement

The malware that avoids Cyrillic networks

A central pillar of this conflict involves sophisticated cyber warfare designed to strike British infrastructure while shielding Russian assets. According to the report, Russian-linked malware is specifically programmed to ignore computers running Cyrillic languages. This technical safeguard ensures that while British banking systems or retailers are targeted, the attackers do not accidentally disable their own domestic networks.

The effectiveness of this digital onslaught has already been felt across the UK economy.. the report cites several high-profile disruptions, including a ransomware attack on Marks and Spencer, interference with Co-Op payment systems, and temporary shutdowns affecting Harrods and Jaguar Land Rover. These are not merely isolated thefts; they represent a coordinated effort to weaponize cybercrime against Western commercial stability.

AI-powered micro-targeting and the death of the mass meme

The nature of Russian disinformation is evolving from broad propaganda into surgical social engineering. While the Cold War era relied on ideological dogma, the current strategy under Vladimir Putin is described as purely cynical, aiming for mass disruption through any available political viewpoint. The report notes that modern "troll farms" no longer rely on flooding platforms like X or Instagram with generic memes to sway the public.

Instead, the integration of Artificial Intelligence has allowed for highly specific demographic targeting. By harvesting personal data—including location, income, hobbies, and family details—disruptors can now direct tailored lies to small, vulnerable groups of individuals. This method is designed to maximize social division and public discontent, making the resulting chaos much harder for security services to trace back to a single state actor.

Money laundering in the UAE and the rise of 'disposable agents'

Russia's proxy tactics extend into the physical and financial realms, utilizing complex international networks to fund illicit activities. The report highlights how Russian financial experts in the United Arab Emirates and other Gulf states are allegedly laundering money for human trafficking gangs. By using dark banking transactions, these actors make the business models of traffickers more lucrative, thereby increasing the pressure of illegal migration on Western governments.

On the ground, Moscow is reportedly moving away from traditional espionage involvinng "sleeper agents" in favor of hiring "disposable agents." These are often small-time criminals paid only a few thousand pounds to perform tasks like arson. The report points to recent arson attacks on properties and a vehicle connected to Sir Keir Starmer as examples of this low-cost, high-deniability tactic. Because these agents are low-level and require little training, they offer the Kremlin a way to cause physical damage without risking high-value intelligence assets.

The mystery of the 'unknown sources' and the scale of infiltration

Despite the specific methods identified, significant questions remain regarding the true depth of the Kremlin's reach. The report notes that Fedorov's promise of retaliation from "unknown sources" highlights a major intelligence gap: how can Western security services effectively defend against threats that are intentionally designed to be untraceable?

Furthermore, while the report identifies specific targets like Jaguar Land Rover and Harrods, it remains unclear how many other British institutions have been compromised by these "unknown" actors. The reliance on petty criminals and automated malware creates a landscape where the line between organized crime and state-sponsored warfare is almost entirely erased, leaving the public to wonder where the next disruption will emerge.