A Russian embassy staffer in Belgrade, identified as Alexander Krasiy and linked to military intelligence, was previously expelled from Bulgaria. This expulsion occurred amid an investigation into a series of arms depot explosions in Bulgaria, with Russian citizens suspected of involvement.

Leaked data suggests Krasiy attended the GRU academy known as the "Conservatory," which trained numerous Russian spies, including Anatoly Chepiga. Serbia is increasingly cited in connection with Russian sabotage operations in the EU, potentially serving as a staging point for a failed operation at Leipzig airport in August 2026.