Russian Shadow Fleet's Drone Use Challenges European Defense

The Russian shadow fleet is using drones. It's a sophisticated, escalating threat that now presents a complex new challenge to European defense postures, and recent analysis suggests incidents involving unidentified drones over sensitive European locations between August 2024 and February 2026 may be linked to this growing maritime network. But they're probing allied defenses. They're testing response mechanisms.

Shadow Fleet Drones: A New Threat Vector

This pattern of incursions has raised serious concerns. Flights often occur at night or in the early morning hours, and they involve drones described as professional or military-style, making them difficult to dismiss as mere hobbyist activity. The International Institute for Strategic Studies (IISS) highlighted that approximately 48 percent of 144 observed drone sightings occurred over military bases, with substantial numbers also noted over critical infrastructure like ports and energy facilities, as well as civilian airports. But these operations appear designed to operate below the threshold of armed attack. That makes attribution and response difficult.

Probing European Air Defenses

The IISS report reveals a strategic intent behind these drone activities. It's a calculated, multi-pronged approach. They're probing allied air defense systems, testing civilian-military response protocols, and gradually normalizing low-level airspace violations to gather intelligence and demonstrate disruptive capability without sparking a direct military confrontation. But this isn't random. It's a deliberate effort.

Identifying the Toolset: Drones and Vessels

Technical capabilities define this strategy. The IISS report highlights the Merlin-VR, a fixed-wing drone built for shipboard catapult launch and parachute recovery, so it offers enough range and loitering time to handle those identified incursions. But Russian companies have also created vertical-takeoff-and-landing drones that need minimal deck space, which boosts operational flexibility. The Orlan-10 is a frequent candidate. That fixed-wing drone has a 500-kilometer operational range and 12 hours of battery endurance, and its performance allows maritime launch from vessels operating beyond visual detection of European coastlines for stand-off intelligence collection against both coastal and inland targets. These drones carry payloads for GPS spoofing, network monitoring, and optical or thermal sensors.

Listen to the Orlan-10's engine. That distinctive combustion noise matches witness accounts of drone incursions near UK military bases, specifically RAF Lakenheath, between November 20 and November 26, 2024, and these incidents coincided with the presence of the cargo ship Hav Dolphin, flagged in Antigua and Barbuda but operating with a Russian crew, docked in the UK. But the vessel was later investigated by German authorities after anchoring near Kiel in May 2025. It's no surprise that this also coincided with drone sightings over a German submarine base.

"Homemade or commercial drones could also have been modified for a Kremlin drone campaign over Europe to prevent easy attribution to Russia."

The Maritime Connection

The IISS report draws a direct link between Russian-linked commercial ships, particularly those in the sanctioned oil "shadow fleet," and the timing of drone incidents. It's a pattern we can't ignore. Automatic Identification System tracking data has shown these vessels often located near various drone events, and consider the Hav Dolphin's presence near sensitive UK military bases in November 2024 , bases that house thousands of US Air Force personnel and are slated for upgrades to support a nuclear arsenal , a telling data point. Similar patterns emerged when the Hav Dolphin was investigated near Kiel, Germany. That coincided with drone sightings over a German submarine base. The evidence is clear.

It’s not just complex. The shadow fleet’s nature amplifies that complexity through flags of convenience and the transport of sanctioned oil, creating an operational opacity that makes their movements anything but transparent and difficult to link directly to state-sponsored missions. But the IISS report provides compelling evidence. At least some of these ships serve a dual purpose, facilitating intelligence gathering and potentially supporting drone operations.

Reading the Competitive Stance

From a strategic standpoint, this development positions European defense planners against a novel form of asymmetric warfare. But it's not just about ships. The Russian shadow fleet, by employing commercial vessels as platforms, effectively blurs the lines between civilian maritime activity and military operations, and that's a challenge that can't be met with outdated paradigms geared only toward identifiable state military assets. The drone incursions represent a low-cost, deniable method of probing defenses and gathering intelligence. They're hard to counter. Conventional military responses alone won't stop it.

Market Implications and Future Outlook

The IISS report's revelations carry significant weight for defense tech and maritime security. It's a wake-up call. European nations are actively working to develop integrated counter-drone capabilities through initiatives like the European Drone Defence Initiative, or EDDI, aiming for interoperable systems that can detect, track, and neutralize threats. But it's not expected to be fully functional until the end of 2027.

• Drone sightings occurred over military bases (48 percent).
• Drone sightings occurred over critical infrastructure (26 percent).
• Drone sightings occurred over civilian airports (18 percent).
• The drone campaign spanned August 2024 to February 2026.

The IISS report makes one thing clear: tech alone can't fix this. Political will and coordinated legal frameworks for using force against unidentified aerial incursions are absolutely critical, yet these solutions don't come easily. But the "hardest problem," they say, is maritime accountability. European governments now face the tough challenge of increasing their willingness to investigate and intercept Russian-linked ships and shadow fleet vessels loitering near their coastlines, especially when those activities are tied to drone launches that carry potential security risks.

What Comes Next

So the future trajectory of this challenge will depend on several factors. Increased vigilance and information sharing among NATO allies will be key to mapping Russian shadow fleet movements and linking them to observed drone activity. It's a complex puzzle. The development and deployment of compatible counter-drone systems, along with clear legal authority for their use, will be needed to deter future incursions. But the ability of European nations to collectively address the issue of maritime accountability, particularly concerning vessels operating under the guise of legitimate commercial activity, will ultimately determine the effectiveness of their response to this evolving threat.