The Russian military and security services are utilizing a “shadow fleet” of tankers to circumvent Western sanctions and transport Russian oil, operating covertly from ships in European waters. Sources confirm that personnel linked to Moran Security, a firm with ties to the notorious Wagner group and Russia’s military intelligence (GRU), have been added to these vessels. These individuals, many with military backgrounds, are tasked with ensuring the smooth operation of the tankers and, potentially, conducting espionage and sabotage, as evidenced by observed drone activity near European installations. Several of these ships, like the Boracay, have been flagged for lacking proper documentation and registration, raising concerns about their activities. The presence of these armed individuals, particularly near NATO coastlines, is viewed as a deliberate tactic by Russia to test European defenses and cause disruption. European intelligence agencies believe Moran is coordinating with Russian intelligence and has been involved in activities like drone operations and sabotage. The investigation highlights the growing sophistication and brazenness of Russia’s hybrid warfare strategy, posing a significant security challenge for Europe.