A third wave of bomb threats hit European aviation on Friday, disrupting at least 18 flights across nine countries — Bulgaria, Czechia, France, Italy, Hungary, Cyprus, Romania, the UK, and Portugal. Every plane landed safely. Every search found nothing. The pattern is now unmistakable: someone is testing how much chaos a few emails can buy. The cumulative toll across Tuesday, Thursday, and Friday now exceeds 53 flights diverted or searched. Hungary scrambled fighter jets three times in a single day. Prague absorbed nine separate threats. Yet Eurocontrol's own numbers frame the scale precisely: 0.0674% of the 26,709 flights scheduled on Friday were affected. The disruption is real but surgically targeted to maximize attention relative to effort. The campaign has expanded beyond aviation. On Friday, bomb threats hit Irish media organisations, forcing RTÉ off-air and evacuating newsrooms. Sky in the UK reported a separate security threat. Earlier in the week, cyber-attacks targeted supermarket refrigeration systems in at least seven European countries. The attack surface is widening from transport to media to food supply — all soft, civilian infrastructure. Investigators say there is no evidence yet of a hostile state or terror group orchestrating the campaign, but some Thursday threats were signed "fighters of the Male State," referencing a Russian far-right, ultranationalist movement founded in 2016. Spain's foreign minister José Manuel Albares called the pattern unmistakable — "It cannot be mere coincidence that so many incidents with exactly the same modus operandi are happening across Europe" — and described it as "hybrid aggression and psychological warfare." Irish Taoiseach Micheál Martin identified the core asymmetry: "It shows how relatively simple it can be to cause disruption and undermine the normal operation of society." This is the defining feature of the campaign. The cost to the attacker is near zero — anonymous messages. The cost to defenders is fighter jet scrambles, evacuated newsrooms, grounded flights, police searches, and public anxiety. The ratio of disruption-per-euro is staggering. The strategic logic, if linked to European support for Ukraine, is clear: impose persistent low-level costs on civilian life until the political will for support erodes. Not a military campaign but an attritional one, targeting the social contract between governments and citizens who expect their flights to depart and their broadcasts to air without interruption. European security agencies now face a triage problem. Every threat must be treated as credible until proven otherwise, which means the hoaxes succeed by existing. The only durable response is attribution and deterrence — identifying the source and imposing costs that exceed the near-zero price of sending a threat. Until that happens, this is a one-sided trade.
