Norway has put into force a new round of sanctions against Russia that hits banks, listed oil refineries, ports, airports, and suppliers of Russia’s military industry, the Norwegian Foreign Ministry announced. The rules mirror the EU’s 21st sanctions package, which Brussels adopted in July.

The EU’s 22nd package, adopted on 12 October, is principally a list of names, while the 21st brought significant new measures, lawyers noted. Among them are new tools against the shadow fleet, the tankers with murky ownership that Russia uses to move oil around sanctions. That fleet also sails along Norway’s coast, and a new Norwegian Coastal Administration report found that it poses a growing threat to security and the environment there.

Banks, refineries, and Sheremetyevo

Norway is not an EU member, but it has joined every EU sanctions package against Russia, with a few exceptions and national adjustments. Oslo backed this one politically on 11 August, and the rules took effect on 21 October. Part of the package was already in force. It placed travel restrictions and asset freezes on 48 people and asset freezes on 168 entities, and it listed 41 shadow fleet vessels on 14 August.

Norway’s transaction ban now covers 33 more Russian credit and financial institutions. A separate ban covers 22 more abroad, including in India, Mongolia, Nigeria, and the UAE.

Another transaction ban reaches listed refineries in Russia and third countries that process Russian oil or help dodge sanctions. A Georgian refinery joins that list on 25 January 2027. The same ban adds two Russian ports and four Russian airports, including Moscow’s Sheremetyevo.

Drone gear and the shadow fleet

Export curbs on dual-use goods now cover 51 new entities that back Russia’s military industry. Some are in China, including Hong Kong, and others are in India, Kazakhstan, Kyrgyzstan, Türkiye, and the UAE. The banned-exports list adds nickel and beryllium powder, along with drone gear such as jamming and interception systems, launchers, and servo motors.

Oslo can now also list ships that service sanctioned shadow fleet tankers or swap cargo with them at sea. Elsewhere in Europe, France’s navy and UK forces have boarded sanctioned shadow fleet tankers this year.

German services detained two Turkish citizens on 12 October over the 23 September arson attack on a Starlink ground station in Wola Krobowska, near Warsaw, Poland’s Internal Security Agency (ABW) said. Both are suspected of arson, and Polish officials blame Russian intelligence. RMF24 later reported that German police also detained two more people who may be connected to the attack.

Poland is one of the main corridors for Western aid to Ukraine, and Polish Foreign Minister Radosław Sikorski has said Poland spends about $50 million a year on Ukraine's Starlink service. That puts Polish infrastructure in the path of a Russian campaign that already hacks cameras to track arms heading east.

Fingerprints, DNA, and a route out

The men were held under European arrest warrants and now await transfer to Poland. Interior Minister Marcin Kierwiński wrote that the suspects would face charges of “subversion, sabotage on behalf of a foreign intelligence service” after their transfer to Poland. Polish authorities issued European arrest warrants for the suspects, who were subsequently detained in Germany.

Działania @PolskaPolicja i @ABW_GOV_PL we współpracy ze służbami niemieckimi (BKA) doprowadziły
do zatrzymania na terenie Niemiec 2 obywateli Turcji odpowiedzialnych za podpalenie stacji Starlink w Woli Krobowskiej. Zarzut-dywersja, sabotaż na rzecz obcego wywiadu. @CBSPolicji

— Marcin Kierwiński (@MKierwinski) October 12, 2026

Police chief Marek Boroń said investigators reconstructed how the suspects prepared the attack and fled. “We have secured recordings pointing to this specific action. We have fingerprints, the perpetrators’ DNA, how they moved, when they came to Poland, and when they were evacuated from our country,” he said. One suspect lives in Germany, and the other had been ordered to leave the country, he added.

Warsaw points at Moscow

Prime Minister Donald Tusk called the fire another act of Russia's hybrid war and promised the saboteurs will answer to Polish justice.

Na zlecenie polskich służb niemiecka policja zatrzymała dwóch obywateli tureckich podejrzanych o podpalenie stacji Starlink na Mazowszu. To kolejny akt wojny hybrydowej. Sprawcy sabotażu odpowiedzą przed polskim wymiarem sprawiedliwości.

— Donald Tusk (@donaldtusk) October 12, 2026

“We have no doubt that Russian intelligence services are behind this act of sabotage,” said Tomasz Siemoniak, the minister coordinating Poland’s special services.

Those services increasingly turn to people tied to the criminal world, he added.

Two more possible links

German counterterrorism officers detained a woman in Berlin, and a man is also in German custody, Polish radio RMF FM reported, citing its reporter. Both may be linked to the arson. The woman allegedly picked up the Turkish men near Łódź after they entered Poland from Germany, then drove them to Wola Krobowska. The man’s role is still being examined.

Drones sank two merchant ships and set a third on fire in the Black Sea economic zones of NATO members Romania and Bulgaria on 5 and 6 October, killing at least two seafarers, Romanian and Bulgarian authorities reported. Ukraine blamed Russia for the first attack. Neither Bucharest nor Sofia has said who launched the drones.

Russia has spent months striking ships bound to and from Ukrainian ports while denying responsibility or staying silent. Now merchant vessels are sinking inside NATO members' economic zones without either government naming the attacker, so Moscow pays no political price for hitting allied waters.

Grain ship sinks off Romania

The Royad Mammadov, a Turkish-owned ship carrying grain from Ukraine's port of Izmail to Italy, sank on 5 October near Romania's Pescăruș offshore platform, 20 nautical miles from the Romanian coast, Digi24 reported. The Romanian Naval Authority described the incident as a fire on board. Romania's Interior Ministry said 11 crew members were rescued and two people died.

Three injured sailors aged 22 to 50 were taken to the Constanța county hospital, conscious and stable, with multiple injuries. Adrian Mihălcioiu, the leader of Romania's Free Seafarers' Union, said the ship was attacked by Russian sea and aerial drones in waters Romanians consider safe.

"It is a commercial ship, a ship that is not part of the war… people who have nothing to do with the war, it is not their war," he said.

Ukrainian President Volodymyr Zelenskyy blamed the attack on "two Russian drones" and said the ship was in neutral waters carrying corn. Citizens of Azerbaijan and India were on board, and the captain was killed, he said. Romanian authorities have not attributed the sinking to Russia.

Two more ships hit in Bulgaria's zone

A day later, drones struck two merchant ships in Bulgaria's exclusive economic zone east of the town of Byala, the first known attack on ships there, Maritime.bg reported. The Togo-flagged Alfa Watan, sailing from Al-Arish, Egypt, to Sulina, Romania, suffered critical hull damage and sank, Militarnyi said. The Bulgarian ferry Dioscuria found only an overturned lifeboat and life jackets at the scene, and the search for the crew continues, Euronews reported.

The Palau-flagged Able, sailing from Galați, Romania, to Istanbul, caught fire, and the Dioscuria rescued its 18 crew members. Both ships are Turkish-owned, Türkiye Today reported. Two sailors with severe injuries were flown to a hospital in Varna, Prime Minister Rumen Radev said, according to AP. Sea and aerial drones hit the ships at about 3 a.m., he said, calling the attack "a blatant violation of international law and maritime law."

Radev called an emergency meeting of four ministries, the presidency, and the security services. No one from the Alfa Watan has been found, he said, warning that if the war is not ended in time, it "will continue to expand its spatial scope." The origin of the drones is still being clarified, Maritime.bg said. Several Bulgarian media outlets cited sources as saying the drones were Russian, Sofia Globe reported.

Russia's war on Black Sea shipping

Russia had already killed the captain of a Tanzanian-flagged ship in September, and days later it struck another civilian vessel, killing its captain too. Ukraine says that route carries 90% of its farm exports.

Romania has destroyed a sea drone near its Neptun Deep gas project and found Russian drones floating in its economic zone. In September, ISW linked drone crashes in Romania and Moldova to a wider Russian pattern of pressure on NATO.

EU foreign policy chief Kaja Kallas called for a moratorium on Black Sea attacks. Turkish President Recep Tayyip Erdoğan said Ankara was stepping up diplomacy to restore grain exports. Türkiye and the UN are organizing new Black Sea truce talks between Russia and Ukraine, Bloomberg reported, citing a diplomat. Russia earlier dismissed Kyiv's offer of a Black Sea ceasefire.