Bulgaria has issued European arrest warrants for two 19-year-old German nationals suspected of setting fire to Starlink antennas south of Sofia on October 9. Of 18 antennas in the mountainous site, three were destroyed outright, two partially burned, and three more damaged. Prosecutors say the suspects entered from Serbia in a German-plated car, claimed to be tourists, and stayed only a few hours. The Sofia case lands barely a week after German police arrested four people — including two Turkish nationals — for sabotaging a Starlink satellite communications station in central Poland in late September. Polish Prime Minister Donald Tusk called that operation an act of "hybrid warfare," and Poland's domestic intelligence agency claimed Russia cooperated with organized crime elements based in Germany to execute it. Lithuania now reports a third incident: an attempted arson attack on a company hosting Starlink communication hardware, with Prime Minister Ingrida Šimonytė pointing at Russia as the likely sponsor. Three NATO states, three attacks, all within weeks. The geographic spread — Black Sea, Central Europe, Baltic — maps Russia's interest in disrupting the full arc of NATO's eastern boundary. The operational pattern is striking in its consistency. Germany serves as the recruitment base in every known case. The operatives are young, expendable, and deniable — teenagers and residents rather than professional agents. Bulgaria's intelligence chief Plamen Tonchev said he was working on the assumption of deliberate sabotage and could not rule out further attacks. This is not a warning about future capability; it is an acknowledgment that the pipeline is active. The target selection is precise. Starlink's military-grade Starshield service is a critical backbone of Ukraine's battlefield communications. Destroying ground infrastructure across multiple NATO states doesn't just disrupt Ukraine's warfighting capacity — it tests NATO's ability to protect its own territory from low-grade, high-deniability attacks. The saboteurs don't need to destroy every antenna; they need to demonstrate that no site is safe. What makes this campaign structurally extractive rather than merely destructive is the asymmetry of cost. Russia deploys recruited amateurs — teenagers, petty criminals — at near-zero expense and near-zero attribution risk. NATO states must then defend hundreds of dispersed satellite ground stations across dozens of countries, a defensive burden orders of magnitude more expensive than the attacks themselves. This is textbook hybrid warfare: force your adversary to spend vastly more on defense than you spend on offense. The 20-year question is whether NATO develops a coherent doctrine for protecting dispersed civilian-military communication infrastructure, or whether the current patchwork of national responses continues to leave the initiative with the attacker. Every month without a unified framework is a month where the cost asymmetry widens.
