Russian Drones From Mediterranean Ships: What Is Known About the Reported Warning

A reported intelligence warning has raised the prospect of Russian Gerbera drones being launched from shipping containers aboard merchant vessels in the Mediterranean. For now, this is an account of a possible operation, not evidence that an attack has been ordered, prepared or carried out. 27

What did El Mundo report?

The Spanish newspaper El Mundo reported on September 23, 2026, that US intelligence had shared a warning with European governments about a possible operation against one of Spain, France or Italy. Under the scenario described, drones concealed in shipping containers would be launched from merchant ships at sea. A source close to Lithuania’s defence ministry identified the Gerbera as a possible drone type. 2713

The distinction between the newspaper’s account and independently verified intelligence matters. Accounts of El Mundo’s reporting refer to an unnamed source close to Lithuania’s defence ministry, Baltic diplomatic sources and defence analysts. The underlying intelligence has not been made public, and the CIA and the three governments have not publicly confirmed the reported warning. The available reporting therefore does not establish that Russia has decided to carry out the operation. 713

How has Italy responded?

Reports say Italian authorities denied receiving a warning of this kind. Opposition MP Lia Quartapelle called on the government to clarify what it knew and how it was responding. The denial leaves a question about the reported circulation of the warning; it does not, by itself, settle whether the hypothetical method is feasible or whether a threat exists. 28

Do other drone incidents support the allegation?

They explain some of the wider concern, but they do not verify this specific scenario. Reports have described suspected drone activity in Germany and airspace incursions in Moldova. In Lithuania, an Italian NATO fighter shot down a Gerbera drone; Lithuania’s president said it was most likely headed for Ukraine, not Lithuania. None of these incidents establishes a link to a merchant ship in the Mediterranean. 1316

The separately reported concern about undersea cables belongs in the same category of context, not corroboration. A suspected operation involving cables near Svalbard and earlier damage to Baltic cables concern different events; neither demonstrates that a container-launched drone operation is under way. 23

Why are the 2027 elections mentioned?

Some reporting presents disruption ahead of the countries’ 2027 electoral cycles as a possible motive for a hybrid operation. That is an interpretation of what an attack might seek to achieve, not verified evidence of a Russian decision to strike or interfere in an election. The central unanswered questions remain whether the reported intelligence warning exists as described and whether it points to a concrete plan. 218