Ukraine revealed signs of future Russian attacks on Poland and Lithuania in July 2025

Last night's Russian attack on Polish territory using drones was a case that Ukrainian intelligence had warned about months ago.

Poland points out that Russian drones ‘repeatedly’ violated Polish airspace
Russian State Duma threatens Poland to be the next attacked after Ukraine

Russia is reportedly testing attack corridors against Poland and Lithuania

On July 10, Polish journalist Marek Budzisz revealed that Ukraine had reported that “SIM cards from Poland and Lithuania have been discovered in downed Russian attack drones. They believe this could indicate preparations to test attack corridors targeting both countries, as they are known to use telecom networks to correct drone flight paths. Or, they could intensify attacks against western Ukraine. The challenge for Polish intelligence agencies is to determine who bought the SIM cards, as registration is required for the purchase.”

Budzisz published a copy of the Ukrainian report sent to Poland and Lithuania showing images of SIM cards from operators in those two NATO countries inserted into Russian drones. The Ukrainian report, written in English, stated these conclusions:

"1. Considering the corridors where the drones with Lithuanian and Polish SIM cards were shot down, there is reason to believe that they were most likely heading towards areas close to Ukraine's western border.

2. The presence of two SIM cards in the drones, one Russian and the other Polish or Lithuanian, suggests that the enemy has begun practical preparations for drone flights over the territories of Poland and Lithuania.

3. It is highly likely that the technique of connecting drones to Polish mobile networks using Polish and Lithuanian SIM cards is being practiced.

4. We consider it necessary to inform our partners in Poland and Lithuania about the discovery of SIM cards from Polish and Lithuanian suppliers in Russian long-range attack drones."

Significantly, the Ukrainian report indicated that these SIM cards had been found on Shahed-type drones, a model manufactured by Iran that Russia has been using in its massive attacks against Ukraine. As we saw here last night, the Russian drones used in the attack against Poland were precisely that type.

The Russian attack on Poland also included a coordinated cyberattack

Separately, Marek Budzisz published a report this afternoon on the Russian attack on Poland prepared by the Institute of Advanced Defense Technologies at the Kyiv Polytechnic Institute, which is under the Ministry of Education and Science of Ukraine. The report, written in Polish, notes that Poland suffered not only a drone attack last night, but also a Russian cyberattack:

"From 9 to 10 September 2025, the Republic of Poland was the target of a complex and coordinated hybrid attack that combined cyber and kinetic components in a synchronized manner. This report presents a comprehensive analysis of network activity during this 24-hour period and provides irrefutable evidence that the observed anomalies in cyberspace were not a random set of incidents, but a deliberate, multi-vector operation planned to support and amplify the physical effect of an unmanned aerial vehicle (UAV) attack. The preliminary analysis conducted previously was fundamentally flawed by omitting the crucial period from 22:00 on 9 September to 8:00 on 10 September. It was during this 10-hour period that the main phase of the cyber operation unfolded, making its analysis crucial to understanding the full picture of the incident."

---

Main image: Naeblys/Alamy Stock Photo. HESA Shahed 163 drones.