Russia’s FSB Foils USD 3 Million Ukrainian Plot to Hijack MiG-31K Armed with Kinzhal for False-Flag Strike on NATO Base in Romania
FSB reveals intercepted communications, cash-bundle videos, and deep HUMINT recruitment tactics allegedly used by Ukraine’s military intelligence to seize a MiG-31K carrying a Kh-47M2 Kinzhal hypersonic missile for a staged attack near NATO’s Mihail Kogălniceanu Air Base.
(DEFENCE SECURITY ASIA) — Russia’s Federal Security Service announced that it had disrupted what it characterised as an operation by Ukraine’s military intelligence service—commonly referred to as the GRU, the Main Intelligence Directorate—aimed at hijacking a MiG-31K interceptor configured to carry the Kh-47M2 Kinzhal hypersonic missile.
The FSB’s announcement, backed by video evidence, intercepted communications, and internal operational timelines, painted the plot as a USD 3 million (RM 14.4 million) attempt to commandeer one of Russia’s most dangerous strategic aviation assets for a false-flag strike intended to implicate NATO.

The alleged objective, according to Moscow’s version of events, was to fly the hijacked MiG-31K directly toward NATO’s Mihail Kogălniceanu Air Base in Romania in a choreographed sequence designed to provoke a catastrophic miscalculation by Allied air-defence units.
The plan, if executed, would almost certainly have risked triggering Article 5 consultations and escalating Europe into a direct confrontation between nuclear-armed powers, making this one of the most serious hybrid-warfare incidents reported since the outbreak of full-scale hostilities in 2022.
For military planners from Europe to Southeast Asia, the plot underscored a new reality: advanced aerial platforms and their hypersonic payloads have become primary targets in the global intelligence contest, with implications that extend far beyond the Black Sea into the Indo-Pacific’s contested skies.
According to Russian counterintelligence, the operation began in late October 2024, when Ukrainian intelligence officers reportedly posing as journalists affiliated with Western investigative media initiated contact with MiG-31K pilots and weapon systems officers.
The alleged recruiters offered between USD 5,000 and USD 10,000 (RM 24,000–48,000) for “exclusive interviews,” a common tactic in HUMINT penetration operations where initial benign engagement is used to build rapport with military personnel.
Once contact was established, the FSB asserts that the GRU escalated the offer dramatically, with a handler identifying himself as “Sergei Lugovsky” delivering the critical pitch: “We are prepared to pay three million U.S. dollars in cash, delivered in any European city of your choice. You will receive full citizenship in a NATO country – passport, residence, security for your family. All you need to do is fly the aircraft to a designated airfield in western Ukraine. The Kinzhal must remain armed.”
The offer of USD 3 million represented more than 100 years’ worth of cumulative salary for a Russian MiG-31K aviator, transforming the proposition into a strategic bribe engineered to pierce Russia’s elite aviation community.
Russian pilots in the aerospace forces typically earn USD 1,200–2,500 (RM 5,800–12,000) per month, with combat bonuses rarely exceeding USD 5,000 (RM 24,000), making the scale of the proposed payout unprecedented in recent Russian military history.
The FSB released footage purporting to show stacks of USD 100 bills in vacuum-sealed bricks, accompanied by a mock-up of an EU passport featuring the pilot’s photograph, reinforcing the psychological effect of tangible rewards and guaranteed relocation.
In one recorded message, the recruiter stated: “Your family will be extracted within 48 hours of confirmation. We have done this before – ask Kuzminov.”
This was a reference to Maksim Kuzminov, the Russian Mi-8 pilot who defected to Ukraine in 2023, an event that Kyiv continues to celebrate as a major intelligence coup and one that appears to have shaped subsequent GRU operations targeting Russian aircrews.
However, the Kuzminov precedent also revealed the risks, as the defector was assassinated in Spain in February 2024, an outcome that failed to deter Ukrainian planners according to the Russian account.
The plot’s escalation to an active hijacking plan represented a new chapter in the global intelligence competition, crossing the boundary between psychological influence and attempted acquisition of advanced weaponry.
The MiG-31K targeted in the operation was scheduled for a patrol mission over the Black Sea, carrying a live Kh-47M2 Kinzhal missile with a 2,000 km range and Mach 10–12 strike profile, making it one of Russia’s premier standoff deterrent systems.
The GRU’s alleged plan required the aircraft to divert mid-flight, enter Romanian airspace under the guise of a malfunction, and transmit a falsified IFF signature mimicking an inbound Russian strike formation to force NATO interceptors and SAM sites to engage.
The destruction of a Russian MiG-31K carrying a live hypersonic missile over Romania’s Black Sea corridor would have provided the basis for Kyiv to portray the event as an unprovoked NATO attack on a Russian strategic asset, potentially compelling Western capitals to intensify military pressure on Moscow.
How the MiG-31K and Kinzhal Became Prime Targets in 21st-Century Hybrid Warfare
The MiG-31K has become a keystone platform in Russia’s long-range strike doctrine due to its ability to loft the Kinzhal missile at speeds and altitudes that accelerate the weapon into the hypersonic regime.
The aircraft, derived from the venerable MiG-31 Foxhound interceptor, has been heavily modified since 2018 to carry a single 2,000-kg Kinzhal mounted under its fuselage, replacing its air-to-air role with strategic deep-strike missions.
With a maximum speed of Mach 2.83 and a combat radius of approximately 720 km when carrying the Kinzhal, the MiG-31K enables Russia to project hypersonic strike capability deep across Europe, the Middle East, or maritime axes of interest.
The Kh-47M2 Kinzhal, based loosely on the Iskander-M ballistic missile, is designed to penetrate advanced air-defence networks by performing mid-course manoeuvres at hypersonic velocities, complicating interception attempts by systems such as Patriot PAC-3, THAAD, and Aegis BMD.
For Southeast Asian states, the Kinzhal represents a benchmark in hypersonic development, forming a reference point for China’s DF-17 glide vehicle, India’s HSTDV programme, and North Korea’s emerging hypersonic re-entry systems.
The combination of the MiG-31K and Kinzhal presents a “strategic decapitation” challenge, as a single aircraft can deliver a high-precision strike against hardened military infrastructure, C3I nodes, or naval facilities within minutes.
This capability is one reason why Russia’s hypersonic fleet has been prioritised for heightened security measures, making the alleged GRU recruitment operation particularly dangerous in its implications.
The FSB’s account suggested that the GRU attempted to exploit the MiG-31’s dual-cockpit configuration by proposing that a weapon systems officer could incapacitate the pilot mid-flight using a neurotoxin inserted into the oxygen mask, then divert the aircraft toward Ukrainian airfields.
However, the technical feasibility of this scenario is questionable, as the K-version weapon systems officer does not possess full landing authority or independent flight controls, and Russia asserts that any ejection event would have destroyed both aircraft and missile.
Nevertheless, the alleged plan demonstrates the scope of imagination that intelligence services are prepared to employ when pursuing high-value aviation targets.
In the broader context of hybrid warfare, targeting such systems allows an adversary to undermine strategic deterrence, degrade military credibility, and provoke political crises that force the opponent into rash decisions.

NATO’s Black Sea Fortress as a High-Value Trigger for False-Flag Escalation
Mihail Kogălniceanu Air Base, located near Constanța on Romania’s Black Sea coast, has emerged since 2022 as NATO’s most important forward operating base in Eastern Europe.
The base hosts Romanian F-16s, French Rafale detachments, Patriot SAM batteries, and rotational U.S. Army units, including elements of the 101st Airborne Division.
As of late 2025, it also serves as a logistical hub for F-16 pilot training, HIMARS resupply networks, and Black Sea ISR operations using MQ-9 Reaper UAVs.
The United States announced a partial drawdown of personnel in October 2025, but the base remains central to NATO’s posture in the region.
From a strategic standpoint, MK Air Base represents the linchpin of NATO’s Black Sea strategy, projecting power toward Crimea, Transnistria, and the Danube corridor.
For Ukrainian planners, according to the Russian narrative, provoking a Russian aircraft’s destruction near MK would create maximum political shock within the Alliance.
A hypersonic missile exploding over or near the base—even accidentally—would inflict devastating damage across its infrastructure, runway complexes, ammunition storage depots, and nearby civilian zones.
Such an event could trigger immediate Romanian demands for NATO retaliation or preemptive measures, including no-fly zones or long-range strikes on Russian staging facilities.
The FSB maintains that this was precisely the intended outcome: to create a narrative in which NATO appeared to shoot down a Russian hypersonic platform in self-defence, only for Ukraine to later frame the incident as Russian escalation.
From an Indo-Pacific viewpoint, the MK-Airbase scenario resembles potential false-flag flashpoints in the region, such as aircraft approaching Singapore’s ADIZ, foreign jets entering Philippine or Malaysian EEZ air corridors, or PLAAF interceptors shadowing Taiwanese or Japanese aircraft near the Miyako Strait.
Asia’s strategic environment, dense with forward bases and radar sites, is equally vulnerable to narratives engineered through manipulated aircraft behaviour.
This incident thus becomes a case study in how militaries must prepare for false-flag attempts designed to provoke defensive responses that can be weaponised by an adversary to shift public perception.
FSB Counter-Operation, Spetsnaz Raids, and Russia’s Hypersonic Retaliation Strikes on Ukrainian Intelligence Nodes
The plot reportedly collapsed when a MiG-31K WSO notified his counterintelligence officer immediately after the GRU contact attempt was made.
Rather than immediately apprehending the would-be recruiters, the FSB authorised what it described as a controlled sting operation where Russian aircrew pretended to entertain the offer to extract deeper intelligence.
This allowed counterintelligence teams to track IP addresses associated with communications routed through Poland, Estonia, and the United Kingdom, along with banking channels allegedly linked to Cyprus-based accounts.
On 3 November 2025, the GRU handler reportedly transmitted GPS coordinates for a landing zone near Rivne in western Ukraine, coinciding with the aircraft’s scheduled patrol departure.
In the early hours of 4 November 2025, FSB Spetsnaz conducted a raid on a safehouse in Kaliningrad that Russia identified as a relay point for the infiltration network.
Three alleged Ukrainian intelligence operatives were detained, while two escaped across the border into neighbouring territory.
The targeted MiG-31K was grounded for inspection, and Russian aviation units were placed on heightened alert as the investigation widened.
Following the operation, Moscow conducted retaliatory strikes using six Kh-47M2 Kinzhal missiles launched from MiG-31Ks operating over the Caspian Sea.
According to Russian reporting, the strikes targeted the GRU’s Electronic Intelligence Centre in Brovary, destroying underground bunkers, along with the Starokyiv Airfield, where runways and Su-27 hangars were reportedly damaged.
A Russian MOD statement asserted: “These strikes are a direct response to Kyiv’s terrorist plot against Russian aviation and NATO infrastructure. Any further attempts will be met with overwhelming force.”
Satellite imagery circulated internationally showed deep cratering consistent with large hypersonic impacts, along with secondary explosions that analysts interpreted as stored signals-intelligence equipment.
For military observers in Asia, the strikes demonstrated how hypersonic weapons allow states to deliver punitive responses with speed and precision, bypassing traditional escalation windows that previously allowed diplomatic intervention.
Hypersonic counterstrikes compress the decision timeline, making them potentially destabilising in multi-actor regions like the South China Sea or the Korean Peninsula, where high-speed retaliation could outpace political control mechanisms.
The incident also illustrated how intelligence failures—or even attempted intelligence operations—can trigger immediate kinetic retaliation in the modern battlespace, where lines between espionage and warfare have nearly vanished.
Global Reactions, Strategic Lessons for the Indo-Pacific, and the Expanding Shadow of Hypersonic Espionage
International reactions to the FSB disclosures varied widely, with Kyiv dismissing the allegations as fabricated and European states expressing scepticism about the dramatic nature of the plot.
Romania’s Defence Minister stated: “We treat all threats seriously, but this sounds like a bad spy movie.”
The UK Foreign Office denied any involvement, while Bellingcat stated it had no connection to the impersonation attempts described by Russian security services.
NATO’s leadership maintained strategic silence, with internal briefings reportedly held by SACEUR General Cavoli, but no public statements issued to avoid amplifying Russia’s narrative.
The MiG-31K Plot as a Warning of a New Strategic Era
The foiled hijacking attempt involving a MiG-31K armed with a Kinzhal hypersonic missile marks a watershed moment in the evolution of hybrid warfare, showing how espionage, psychological manipulation, and advanced weapon systems can intersect with catastrophic potential.
The plot demonstrated that a single aircraft, one missile, and a USD 3 million (RM 14.4 million) bribe could have triggered escalation between nuclear-armed blocs, thrusting Europe to the brink of open war.
Russia’s counterintelligence operation and subsequent hypersonic retaliation underscored how quickly modern states can shift from intelligence confrontation to high-speed kinetic action.
For the Indo-Pacific, the message is clear and urgent: as China, the United States, Russia, India, and other regional powers field hypersonic platforms, these systems will become prime targets for infiltration, hijacking attempts, and false-flag operations.
In an era where the margin between espionage and Armageddon is razor thin, the MiG-31K incident serves as a stark warning that the next attempted defection or hijacking may not be intercepted in time.
— DEFENCE SECURITY ASIA
