A Ukrainian builder was manipulated into targeting UK Prime Minister Keir Starmer's property as part of a broader Russian disinformation campaign.

The arrest of Roman Lavrynovych for conspiring to commit arson against properties linked to UK Prime Minister Keir Starmer has unveiled a disturbing web of Russian cyber warfare. This 22-year-old Ukrainian builder, driven by financial incentives, became an unwitting tool in a larger scheme orchestrated by a shadowy figure known only as EL.
The BBC’s investigation reveals that EL, identified as Evgeny Lyukshina young Russian diplomat, directed Lavrynovych through social media and messaging apps. Lyukshin’s messages glorified President Vladimir Putin and offered Russian citizenship in exchange for further attacks, highlighting the depth of Russia’s involvement in destabilizing foreign governments.
The Anatomy of a Disinformation Campaign
The arson attacks were just one component of a broader strategy that included creating fake online groups to stir up division and fear. EL and his operatives established Direct Action UKa purported far-right group, and the Takbir Foundationa bogus Islamic organization.
These groups were used to organize acts of vandalism and spread propaganda, exploiting societal tensions in the UK.
Direct Action UK, for instance, offered cash for attacks on police and mosques, using currency symbols in the Russian style. The group’s social media channels featured videos branding Starmer a traitor and promoting hatred of Muslims. Despite being fake, these groups generated real-life attacks, including vandalism of six mosques and an Islamic school in London.
The Role of Social Media in the Campaign
EL’s operations were primarily conducted through Telegram and other social media platforms. He recruited Lavrynovych from a group for Ukrainians in London seeking work, gradually tasking him with actions of escalating criminality. The handler’s messages, sent in formal Russian and less proficient Ukrainian, revealed his ideological goals and connections to high-level Russian officials.
EL’s Telegram account previously bore the name of the Takbir Foundation, which sought to recruit Muslims to spray-paint graffiti in the UK. However, the foundation’s real goal was to inflame the far right with this vandalism. Telegram accounts that pretended to be those of devout Muslims later switched to an aggressive anti-Islam agenda with Direct Action.
The Impact on UK Communities
The disinformation campaign had tangible consequences for UK communities, particularly Muslim populations. The vandalism of mosques and the spread of hate leaflets created an atmosphere of fear and division. Anti-racist organizations like Hope Not Hate and Tell Mama reported their concerns to counter-terror police, but their warnings went unheeded.
Iman Atta, CEO of Tell Mama, expressed concern over the lack of response from authorities. “It’s something that is happening online, but it’s actually moving directly into criminal damage and criminal acts of violence and terrorism on our streets,” she said. The Metropolitan Police are investigating seven instances of criminal damage as anti-Muslim hate crimes, but no arrests have been made.
The Broader Context of Russian Hybrid Warfare
Russia’s strategy of using proxies to carry out acts of violence, sabotage, and espionage is not new. The US has long been a target of Russian hybrid warfare, with state-controlled media organizations like Rybar seeking to sow discord and promote social division. Rybar has been sanctioned by the UK government for using “classic Kremlin manipulation tactics.”
Ukrainians are frequently targeted for Russian sabotage recruitment across Europe. Vitaliy Sova, a senior investigator with the National Police of Ukraine, noted that a third of participants in a recently uncovered Russian network plotting sabotage in 11 countries were Ukrainians. “It’s easier for the Russians this way, because it discredits Ukraine in the eyes of our partners and European countries,” he said.
The case of Roman Lavrynovych and the broader disinformation campaign targeting UK Prime Minister Keir Starmer highlights the sophisticated and insidious nature of Russian cyber warfare. As the world grapples with the consequences of these actions, the need for vigilance and robust counter-measures becomes ever more apparent.
