2019 Gresmes Internetui en
2019 Gresmes Internetui en
2019 Gresmes Internetui en
NATIONAL
THREAT
ASSESSMENT
2019
STATE SECURITY DEPARTMENT OF THE REPUBLIC OF LITHUANIA
NATIONAL
THREAT
ASSESSMENT
2019
Vilnius, 2019
CONTENTS
INTRODUCTION 3
SUMMARY 4
REGIONAL SECURITY 9
MILITARY SECURITY 19
CYBER ESPIONAGE 35
INFORMATION SECURITY 43
TERRORISM 55
INTRODUCTION
The document assesses events, processes and trends that make the
biggest influence on national security situation in the Republic of Lithu-
ania. Based on them and considering the long-term trends affecting
national security, the document provides the assessment of major
challenges that the Lithuanian national security is to face in the near
term (2019–2020). The assessments of long-term trends project the per-
spective up to 10 years.
Short term: 0–6 months Near term: 6 months – 2 years Mid term: 3–5 years Long term: 6–10 years
4
SUMMARY
REGIONAL
SECURITY
Formation of the new Government and the Kremlin's first steps after
the presidential elections indicate the scope of likely changes in Rus-
sia. The ruling regime recognizes challenges posed by the economic
stagnation. It tries to implement certain reforms and stimulate the eco-
nomic growth with national mega-projects, but there are no plans to
reform the existing political system. Changes within the ruling elite are
negligible – domination of members of intelligence and security ser-
vices and regime-loyal technocrats continues. The Kremlin consistently
enhances control over society, expands the arsenal of tools to con-
trol internet, censors media, and limits activity of non-governmental
organizations. The Kremlin pays close attention to patriotic upbringing
and propaganda targeting essential groups of society. Regime critics
not only face persecutions of law enforcement, but also violence of
regime loyalists. Journalists, who investigate crimes of the regime, dis-
appear, mysteriously perish or are forced to flee the country.
It is possible that while facing the inability to deliver growth and pros-
perity the Kremlin may continue resort to well-established practices –
aggressive foreign policy or even reckless adventurism. Slogans like
‘West is Russophobic’, ‘Russia needs to regain proper respect and its
place within international system’ and exaggeration of external threats
became the essential basis for legitimacy of the regime. Even though
the Kremlin does not feel a need to take immediate actions to change
the current situation, it is unlikely that deteriorating domestic situation
would lead Putin to softening the aggressive foreign policy towards the
West or refraining from attempts to increase its influence in neighbour-
ing countries.
The Kremlin prefers power tactics and actively employs it in its foreign
policy. Russia is not prone to compromises and considers concessions
as a sign of weakness. It is unlikely that the Kremlin would surrender
Crimea, withdraw from Donbas or retreat regarding other major inter-
national issues. It therefore waits for the Western position to change
gradually. This would be the Kremlin's major achievement. It would
confirm effectiveness of the power tactics and would encourage similar
Russian behaviour in the future.
Although the Kremlin is highly ambitious, the actual results of its for-
eign policy are mixed. Russia would like to normalize its relationship
with the West on its own terms, but so far without major success. It is
unlikely that China would consider Russia as an equal partner because
of its considerably smaller economic potential. Across the world, Rus-
sia turned into the greatest supporter and arms provider to dictator-
ships. The Western countries tend to limit their relations with such
regimes, while Russia exploits them to increase its influence. However,
such allies provide limited possibilities to create an alternative world
Russia and Belarus – order or to develop a growth-stimulating economic cooperation.
a strained union
AP / Scanpix
15
Russia is gradually changing its foreign policy towards the Baltic States.
The Kremlin likely concluded that the key to the Baltic States is not in
Vilnius, Riga or Tallinn, but in Brussels or in other major world capitals.
Therefore, the Kremlin has refocused its effort in that direction. Russia
believes if it succeeds in normalising relations with the EU, the Baltic
States would either have to soften their positions towards Russia or
could be accused of subverting relations with the Kremlin.
Despite its aggression against Ukraine lasting since 2014, Russia has no
effective levers to impact Kiev's policy – the image of an aggressor has
significantly reduced support for pro-Kremlin parties in Ukraine. The
Kremlin's abilities to penetrate decision-making process with the help
of highest-level influence agents and exert direct influence over the
fundamental national processes in Ukraine will remain very limited.
The aggression has considerably reduced Russia's possibilities to use
‘soft power’ means, while granting autocephaly to the Ukrainian Ortho-
dox Church can weaken one of the main Russian influence tools.
Currently, Russia does not have a long-term strategy neither for reso-
lution of the conflict nor for normalization of relations with Ukraine.
Therefore, it seeks opportunities to destabilize internal situation in
Ukraine and discredit Kiev in the eyes of its Western allies and inter-
national community. Russian imposed restrictions on Ukrainian naviga-
tion through the Kerch Strait fuel tension in the Azov Sea Region – a risk
of armed incidents persists. It is likely that Russia will further seek to
provoke Kiev to use military force. Russia could respond by completely
closing Ukrainian navigation through the Kerch Strait. Situation in the
Azov Sea can increase military tension in Donbas between Ukraine and
Russia-controlled separatists. However, in the short term, resumption of
a full-scale armed conflict in Donbas is unlikely.
Military parade in
Kaliningrad
Sputnik / Scanpix
19
MILITARY
SECURITY
Major Trends in
Russian Armed Forces
Russian defence spending has always
been neither clear nor transparent.
According to official numbers, in 2018
the nominal funding for Russian Defence
Ministry decreased and should not reach
3 percent of the GDP. Nonetheless, due
to a possibility to conceal spending and
allocate additional financing at any time,
Putin meets members of the
‘Young Army‘
the real defence spending is and will be
AP / Scanpix noticeably higher in comparison to the official statistics. However,
lack of modern technologies, demographic problems and sanctions
imposed by the Western countries will have a considerably larger neg-
ative impact than the reduced financing. The AF will remain quite attract-
ive compared to most employers in the public and private sector. It is
highly likely the allocated funding will allow to implement the modern-
isation programme and the nominal decrease of the funding will not
have a significant negative impact on Russian military potential.
Growing defence capabilities of the Baltic States and NATO military contingents deployed in the region
reduce Russia's ability to localize potential military conflict and rapidly achieve desirable results
avoiding a large-scale NATO involvement. This reduces probability that Russia would resort to military
means against the Baltic States. Despite this, Russia will further seek to convince Western (including
Lithuanian) politicians and societies that additional NATO security measures in the Baltic region are
counterproductive and increase tensions.
A large ammunition storage site is under construction in the western part of Kaliningrad
Oblast (close to the Prokhladnoye settlement). New-type reinforced ammunition bunkers are being
established.
Reconstruction of nuclear weapons storage bunker is underway in the western part of Kaliningrad
Oblast (close to the Alekseyevka settlement).
A modern home base for a coastal defence unit in Donskoye area is being built. New permanent
storage hangars for Bastion-P/SSC-5 and Bal/SSC-6 coastal defence systems were built.
A motor-rifle brigade is being relocated to Sovetsk, close to the Lithuanian border. Russia
develops additional military infrastructure to enable permanent deployment of the brigade.
Long-range air defence systems S-400/SA-21 capable of destroying air targets within 250 km range.
In the short term, Russia plans to deploy additional S-400 systems.
Coastal defence systems Bal and Bastion-P, capable of engaging ships up to 130 km and 300 km
range respectively.
Missile systems Iskander-M can be equipped with both conventional and nuclear warheads and
are capable of destroying ground targets within 500 km range. In spring 2018, Russia fully upgraded the
missile brigade based in Chernyakhovsk with Iskander-M systems.
The Baltic Fleet has three ships equipped with cruise missile systems Kalibr capable of destroying
targets within 2.000 km range.
A2/AD also includes non-kinetic tools such as radioelectronic warfare systems primarily intended
for interference with opponent's communications and navigation.
Belarus as Buffer State in Russian
Military Strategy
From the standpoint of Lithuanian national security, the role of Belarus
in Russian military planning is extremely important. In case of a con-
flict with the West / NATO, Russia plans to use Belarusian territory as a
bridgehead for combat actions against the West.
rus and Russia joint strategic exercises ZAPAD simulate military con-
flict with NATO. Moreover, Belarus holds unannounced joint military
exercises with participation of Russian military equipment and per-
sonnel. In recent years, the number of joint exercises of Russian Air-
borne Troops and Belarus Special Operation Forces has considerably
increased. During the last joint Special Forces exercise in September
2018, Russian airborne troops brought their state of the art equip-
ment to Brest region. Russian military transport aircraft conducted an
airdrop of military equipment in Belarus territory for the first time in
its modern history. The gradually deepening military integration with
Russia reduces Belarus' ability to implement independent defence and
security policy.
AP / Scanpix
27
ACTIVITY OF HOSTILE
INTELLIGENCE AND
SECURITY SERVICES
The failed attempt of the Main Directorate of the General Staff of the
Russian Armed Forces (GRU) to poison its former officer Sergey Skri-
pal on British soil prompted a collective and unprecedented response
of Western countries and their allies. In March-April 2018, 29 countries
and NATO declared persona non grata 153 undeclared Russian intelli-
gence officers under diplomatic cover. Lithuania declared persona non
grata three Russian spies under diplomatic cover – one GRU and two
Foreign Intelligence Service' (SVR) officers. The ever-largest collective
response reduced (at least temporarily) Russian intelligence capabili-
ties in Lithuania and other Western countries. However, Russian intel-
ligence services now try to recover their lost positions.
The other failed GRU operation – the interception of GRU officers who
attempted to penetrate IT networks of the Organization for the Prohi-
bition of Chemical Weapons in the Netherlands – revealed that Russia
28
conducts cyber espionage not only remotely, but when needed, Rus-
sian intelligence services dispatch their officers abroad to break into
IT networks.
Russian intelligence services regularly analyse the lists of individuals who served in Soviet military
and search for Lithuanian citizens currently holding positions in law enforcement, military, politics
or business. Having identified a proper target, Russian intelligence services find and direct retired or
active duty Russian or Belarusian military officers to renew (directly or remotely) the relationship with
their former comrade in Lithuania. Russian intelligence officers seek to lure their targets out to Russia
or Belarus under the pretext of military occasions and commemorations, comrade reunions etc. If it
succeeds, Russian intelligence tries to gradually engage them in spying against Lithuania.
Russian intelligence activity against
critical infrastructure in Lithuania
Russian intelligence and security services pay particular attention to
intelligence collection on the Lithuanian infrastructure of strategic
importance. They collect intelligence on industry companies, infrastruc-
ture of the Lithuanian Armed Forces (AF), Lithuania's communication
systems, naval ports and airports,
railway and road networks. Recently,
Russian intelligence became excep-
tionally interested in the objects of
Lithuanian energy sector.
In 2017, a Russian reconnaissance UAV was also found at the Polish bor-
der. Both cases prove that Russia uses UAVs for intelligence collection
not only in conflict zones but also in peacetime in neighbouring NATO
countries. Russia collects intelligence on objects of strategic impor-
tance in Lithuania for its military planning. Russia's usage of UAV tech-
nology significantly expands its possibilities of operational-tactical
intelligence collection abroad in peacetime, while defensive measures
against it are difficult to implement. Therefore, it is likely that in the
near to mid term the intensity of Russian intelligence activity against
critical infrastructure in Lithuanian will not decrease. Technological
progress will make this activity even harder to trace.
Chinese
Intelligence
Services expand
their area of
interest in
Lithuania
Russian intelligence services
search targets among
Lithuanian citizens crossing Growing China's economic and political ambitions in the West resulted
the border. The Queen
Louise Bridge connects
in the increasing aggressiveness of Chinese intelligence and security
Lithuania with Kaliningrad services' activities not only in other NATO and EU countries, but also in
Oblast.
15 min / Scanpix
Lithuania. Two Chinese intelligence services operate in Lithuania: Min-
istry of State Security and Military Intelligence Directorate.
Lithuanian citizens.
CYBER
ESPIONAGE
Scanpix
In 2015–2018, amid Russian athletes doping scandal, information systems of international sports
organizations were penetrated with the aim to discredit the persons who investigated the the Russian
athletes' offences and other states' athletes.
During 2016 US and 2017 France presidential elections Russian hackers infiltrated information
systems of the candidates and their campaign offices and used the obtained data in disinformation
campaigns in order to discredit them.
In December 2017, an attempt to obtain information related to investigation of MH17 aircraft hit
over Ukraine was made in Malaysia.
In spring 2018, Russia made two attempts to infiltrate the laboratories in Switzerland and the
Netherlands investigating the case of poisoning of Skripal and his daughter.
In 2018, it was revealed that Russian hackers tried to intercept correspondence from the
Orthodox Church leaders, who supported granting of autocephaly to the Ukrainian Church.
Despite so much attention from the Western states to Russian cyber-attacks, a new Russian
cyber-attack related to the mid-term elections in the US was observed in 2018.
PROTECTION OF
CONSTITUTIONAL
ORDER
Russia manipulates democracy
in order to influence social and
political processes
The Kremlin perceives the collapse of the Soviet Union and the subse-
quent Euro-Atlantic integration path chosen by the Eastern and Central
Europe countries as one of the greatest geopolitical catastrophes. Rus-
sia seeks to change the choice of these countries, including Lithuania,
by gaining influence over these societies and their political decisions.
In Lithuania, Russia abuses the democratic freedoms and rights guar-
anteed by the Lithuanian Constitution to conduct subversive activity
which poses threat to national security.
The Russian ruling elite, under the veil of attention to its diaspora –
an objective intrinsic to democratic countries – implements subversive
compatriot policy aimed at fomenting ethnic discord in the Lithuanian
society. During his address at a plenary session of the 6th World Con-
gress of Compatriots Living Abroad, held in Moscow in October 2018,
Putin criticized allegedly growing Russo-phobia in the Baltic States,
extreme nationalism and violations of Russian speakers' rights. To pro-
tect the latter, Russia sponsored two centres operating in Lithuania.
Representatives of these centres participated in international forums
for protection of human rights, disseminated disinformation and
accused Lithuania of allegedly violating Russian speakers' rights.
To discredit Lithuania, the Kremlin uses events that are not linked with purported violations of
Russian speakers' rights. In 2018, following a several year-long break individuals related to informal
extreme right groups engaged in violent incidents in Lithuania. These single crimes were not 40
Russo-phobic and did not indicate a rise of political extremism. Same individuals, well known to
law enforcement, usually engage in incidents that attract public attention and serve Russia in its
unfounded accusations.
In democratic societies, freedom to express ideas and engage in discussions is distorted if payed
trolls or bots that follow a preprogramed algorithm get to initiate and moderate these discussions.
Private structures that are close to the Russian authorities establish a dissemination network of fake
news and commentaries in the social media. It is likely that one centre coordinates directions and
topics of Russian activities in social media. The US special counsel Robert Mueller's investigation
and charges brought against employees of the Internet Research Agency and its sponsor, Russian
oligarch Prigozhin, for interference with the US presidential election indicate that Russian information
operations in the social media are an important component of Russian influence activity (‘active
measures’) abroad.
Russian meddling in electoral process in the US shows that Kremlin-related companies and
intelligence services seek to establish operational platforms in foreign social media that could
serve as a tool to destabilize the situation in a foreign country. Available data indicates that Russia
possesses required capabilities to disseminate propaganda and disinformation in the Lithuanian
social media. It is possible that Russia will use these capabilities during the 2019 election cycle in
Lithuania.
Russia is particularly interested in legitimizing the annexation of Crimea. It organizes large
international events in the occupied territory and invites foreign politicians and public figures
to attend them. In 2018, marginal political actors from Lithuania were invited and attended
the 4th International Yalta Economic Forum and the Livadia Forum. Lithuanian representatives
participating in these events contribute to the legitimation of the occupation of Crimea, which
contradicts the Lithuanian foreign policy.
INFORMATION
SECURITY
Russian history
policy aimed
to justify
aggressive
actions abroad
Russia's confrontational strat-
egy towards the West and the
Eurasianism ideology empha-
sizing Russia's superiority
against the West increased
the need for politicized his-
tory. Russia's history policy
became one of the key instru-
ments of its confrontational Commemoration of the 9th May
in Lithuania
strategy and ideology. The Kremlin manipulates the Soviet victory in 15 min / Scanpix
the Second World War (WWII) seeking to justify its claims to control the
post-Soviet space.
These reasons explain why the Soviet victory and the perpetuation of
Soviet heritage are among priorities of Russian history policy in Lithu-
ania. In pursuance of these aims, Russia implements and actively pro-
motes projects of history policy, particularly seeking to attract the
youth. Leaders of the Soviet veteran and Russian compatriot organ-
izations in Lithuania implement this activity under coordination of
One of the main targets of the Russian history policy is the Lithuanian armed resistance movement,
as it denies clichés of the Kremlin's narrative about the positive Soviet influence to Lithuania's
development. Russian officials and subordinate propagandists seek to shape the attitude that only
Nazi collaborators and Holocaust-complicit criminals supported the resistance against the Soviet
occupation. To compromise the Lithuanian resistance the Kremlin cynically manipulates the Holocaust
tragedy to achieve the goals of its history policy. Russian propagandists further intensified this
activity as the Lithuanian Parliament declared 2018 the year of Adolfas Ramanauskas-Vanagas – one
of the leaders and symbols of the Lithuanian resistance movement. For the same reasons Lithuania's
aspirations to render legal assessment of Soviet crimes against Lithuanian people and the claim to
compensate damage suffered during the Soviet occupation trigger furious reaction from the Kremlin.
47
ECONOMIC
AND ENERGY
SECURITY
Despite Putin's jokes that Russia is building a NPP for Belarus regardless
of its own interests (‘instead of supplying gas we build a nuclear power
plant’), this project is very important for Russia. Firstly, its implemen-
tation would enhance Russia's influence in Belarus – Rosatom would
be able to control the exploitation, provision of nuclear fuel and, ulti-
mately, the decommissioning of the BelNPP. Secondly, these long-term
processes would grant Russia another tool of political influence not
51
only in Belarus but also in the whole region. Thirdly, after commission-
ing of the BelNPP Russia would seek to regain a leading position in the
regional energy market. Finally, the project is important for Rosatom,
which actively seeks to enhance its positions in the market of nuclear
technologies.
TERRORISM
Directed – terrorist attacks, planned and coordinated by ISIL. Good tactical preparation, sophisticated
planning, significant damage, many victims. Some of these attacks were carried out by foreign fighters
returned from conflict regions in Syria and Iraq to Europe. ISIL coordinated its last successful terrorist
attacks in Brussels (in 2016) and in Manchester (in 2017).
Enabled – radicalized lone individuals and groups that act independently. They had contacts with ISIL
terrorists online, discussed possible actions and received approval. Usually poor tactical preparation,
no experience, unsophisticated attacks.
Inspired – radicalized lone individuals and groups that act independently, merely inspired by ISIL
propaganda. Possible contacts with local extremists; support of accomplices. Usually poor tactical
preparation, unsophisticated attacks, use of available means, low damage. Exceptions: terrorist attacks
in Nice (France) in 2016 as well as in Barcelona and in Cambrils (Spain) in 2017.
Individuals carrying out terrorist attacks in Europe on behalf of ISIL plan
their actions independently, usually utilize simple and easily accessi-
ble means. Most of them have no direct links to terrorist organization,
but are not completely independent either, as they communicate with
members of ISIL or like-minded radicals in Europe who assist in car-
rying out the attacks. These terrorists have chosen law enforcement
officers and random civilians as their targets in Europe.
Over the past three-four years, active ISIL propaganda has strength-
ened the trend of lone actor terrorism. During this period, ISIL distrib-
uted a considerable amount of terrorism propaganda (mainly intended
for youth), interpretations of religious texts and instructions for terror-
ist and paramilitary activity. This material will remain available to the
supporters of the jihad ideology for a long time.
The security situation in the northern and central Mali remains com-
plicated. The implementation of the peace agreement has been pro-
gressing slowly, as the ethnic conflict continues. The activity of radical
groups poses the biggest security threat. Although international forces
based in the region conduct antiterrorist operations, radical militants
remain strong. Ability to infiltrate into local communities through fam-
ily connections, trade relations and to exploit ethnic disagreements
and inaction of central authorities determine their resilience. Conse-
quently, it enables the extremist groups to spread their influence, ide-
ology, attract new members, and continue smuggling activities. Terror-
ist threat against international forces and in the region of Sahel will
persist.
CONCLUSIONS
AND FORECASTS
In 2019, changes are unlikely in Russian domestic policy. In the mid term,
the Kremlin will prepare to address the problem of 2024 – the end of
Putin's term. Whatever the solution will be, it is highly likely that neither
the nature of the regime nor its implemented policy will change. There
are no real threats to the ruling regime in Russia but in the mid term
economic difficulties and international isolation will increase tensions
within the elite and the social discontent in the society.
There are no indications that Russia would try to adjust its military
and security policy towards de-escalation and tension reduction. Both
Russia's domestic and foreign policy are heavily militarized. It is highly
likely that Russia will seek ways to enhance its global positions and
expand the network of military bases abroad. Ability to start execute
combat orders with 24–48 hours' notice, build-up of Russian military
capabilities and the determination to use them will be one of the main
factors negatively affecting Lithuanian national security.
In 2019, Russia will retain focus on post-Soviet countries and will
strengthen its influence over their domestic policies. In the Moldo-
van parliamentary election in February 2019, the Kremlin will seek to
secure the victory of political parties seen as more favourable to Rus-
sia's interests. Russia will tighten control over Belarus to ensure that
Belarusian decisions and domestic processes would conform to the
Kremlin's interests. Currently, Russia cannot influence Ukraine as much
as before the annexation of Crimea, in particular by the means of ‘soft
power'. It is highly likely that the Kremlin will seek opportunity to dest-
abilize situation in Ukraine and discredit Kiev in the eyes of the inter-
national community.
It is highly likely that in the near term the stream of investors who oper-
ate in third countries, often concealing their actual beneficiaries and
seeking to invest in Lithuania, will not decrease. This negative trend
will create additional risks to Lithuania, while some potential investors
with ties to hostile intelligence and security services will pose threat to
Lithuania's national security.
ISBN 978-609-412-162-3
© State Security Department of the Republic of Lithuania, 2019
© Ministry of National Defence Republic of Lithuania, 2019
4