Full Report
The joint September mission follows a serious encounter on June 12, when Sweden was forced to scramble its Gripen jets twice in a single day to intercept Russian Su-24 Fencer and Su-34 Fullback strike aircraft operating aggressively close to Swedish airspace.
Analysis Summary
# Main Topic
Russian Aerial Incursions and Hybrid Probing in the Baltic Sea Region
## Key Points
- **First Joint Intercept Operation:** On September 24, 2026, the Finnish and Swedish air forces executed their first joint operational mission, scrambling F/A-18 Hornets and JAS 39 Gripens to intercept a Russian military flight formation (including Tu-134, MiG-31, and Su-30 aircraft) over the Gulf of Finland.
- **Aggressive June Encounter:** This joint deployment follows a critical incident on June 12, 2026, when Sweden was forced to scramble its Gripen jets twice in a single day to intercept Russian Su-24 Fencer and Su-34 Fullback strike aircraft operating aggressively close to Swedish airspace.
- **Pattern of Non-Cooperative Flights:** Between August 31 and September 6, NATO jets intercepted Russian Il-20 reconnaissance aircraft operating without active transponders or filed flight plans, resulting in an aerial border incursion into Estonian airspace.
- **Escalation of Hybrid Threats:** The aerial provocations coincide with a broader surge in suspected Russian hybrid operations across Europe, including cyberattacks, regional sabotage attempts (such as a modified drone found at Leipzig Airport), and hostile signaling (a Russian warship firing flares at a Danish military helicopter).
## Threat Actors
- **Russian Air Force / Russian State Actors:** Attributed to Russian military elements conducting state-sanctioned positioning, reconnaissance, and airspace probing across the Baltic Sea region to test NATO's defensive resolve.
## TTPs
- **Airspace Incursions and Probing:** Flying strike and transport formations aggressively close to or directly into sovereign airspace (e.g., Swedish and Estonian borders) to evaluate radar tracking and reaction times.
- **"Dark" Transit Operations:** Operating military reconnaissance assets (such as the Il-20) in international air corridors with disabled transponders and without submitting regulatory flight plans.
- **Hybrid Warfare Tactics:** Employing asymmetric destabilization measures including cyber operations, localized sabotage, and dangerous physical signaling (firing flares at military helicopters).
## Affected Systems
- **Sovereign Airspace:** Air defense boundaries of Sweden, Finland, Estonia, and Denmark.
- **Regional Aviation Safety:** Air traffic control and safety mechanisms compromised by non-responsive military aircraft operating without transponders.
- **NATO Eastern Flank Defense Infrastructure:** Regional military installations and civilian transit hubs (e.g., Leipzig Airport).
## Mitigations
- **Nordic Air Power Cooperation:** Establishing a highly synchronized defensive framework between Sweden, Finland, Norway, and Denmark that allows Quick Reaction Alert (QRA) forces to operate seamlessly from each other’s air bases.
- **Persistent Quick Reaction Alerts (QRA):** Maintaining continuous readiness of advanced fighter aircraft (Saab JAS 39 Gripen, F/A-18 Hornet) to identify, shadow, and intercept unauthorized aerial entries.
- **Enhanced Intelligence and Coordination:** Leveraging shared NATO and partner-nation situational awareness to detect, log, and counter hybrid gray-zone maneuvers before they escalate.
## Conclusion
Russia's persistent aerial incursions and hybrid activities over the Baltic Sea represent a calculated campaign to probe defenses, disrupt regional stability, and test the cohesion of NATO's newly expanded alliance. The transition of Finland and Sweden toward fully integrated, cross-border defensive actions via the Nordic Air Power initiative represents a vital step in maintaining deterrence and securing the airspace along Europe's eastern flank.