Who Is Behind European Flight Bomb Threats? Russia, Cyberattacks and Possible Coordinated Hoaxes Under Investigation

Who Could Be Behind Hoax Bomb Threats to European Air Travel?
European authorities are investigating a growing wave of false bomb threats targeting passenger flights and airports across the continent. The incidents have disrupted dozens of flights, forced emergency landings and prompted military fighter jets to escort commercial aircraft.
Although no explosives have been discovered, the scale of the incidents has raised serious security concerns.
Investigators are examining whether the threats could be part of a coordinated campaign involving extremist groups, online attackers or state-linked operations.
Russia has emerged as one possible focus of attention. However, officials have not produced public evidence proving that Moscow organised the incidents.
According to reports published on November 6, at least 35 aircraft have been affected since the beginning of the week. At least 27 flights faced threats on Thursday alone.
Russia Faces Questions Over Possible Hybrid Warfare
Russia has attracted attention because European countries have accused Moscow of supporting sabotage and other disruptive activities.
These activities are often described as hybrid warfare. The strategy involves using cyberattacks, misinformation, sabotage and other actions to weaken an opponent without starting a direct military conflict.
Several European governments have previously accused Russia of conducting or supporting such operations.
The latest aviation incidents have therefore raised suspicions that the threats could be connected to a wider campaign against European infrastructure.
Some security experts believe the timing and scale of the incidents deserve particular attention.
However, suspicion is not proof. European authorities have not publicly established a direct connection between the bomb threats and the Russian government.
An Extremist Group’s Name Appears in One Threat
Investigators are also examining an email that reportedly used the name of a Russian ultranationalist organisation known as Male State, or Fighters of the Male State.
The group is associated with extreme anti-feminist views and was banned in Russia in 2021.
The appearance of its name in an email sent to aviation authorities has increased interest in a possible extremist connection.
However, investigators cannot assume that the organisation sent the message simply because its name appeared in it.
An individual or another group could have used the name to mislead investigators or attract international attention.
The group’s founder has denied involvement, according to Reuters reporting.
Possible Cyberattacks and Coordinated Disruption
Another possibility is that the incidents are part of a wider cyber-disruption campaign.
European countries have recently reported several suspicious incidents affecting important services and infrastructure.
These include cyberattacks, unexplained drone activity and disruptions involving essential facilities.
The aviation threats have added to concerns about the security of European transport networks.
Investigators are examining whether the messages were sent by one person, several individuals or an organised network.
The repeated timing of the threats has raised questions about possible coordination.
However, similar wording or delivery methods do not automatically establish that all incidents came from the same source.
