The Smart Marty Sky Dispatch
Russian Extremist Group Named in Sofia Airport Bomb Threat Emails
Emails sent to several Sofia Airport addresses claimed that explosives had been placed aboard three Ryanair aircraft bound for Bulgaria and were signed in the name of the Russian extremist movement "Fighters of the Male State," according to messages reviewed by operator, while an identical threat was also sent to the operator of Rome's airports. The emails alleged that explosive devices had been planted on three Ryanair planes traveling to Bulgaria.
A Russian extremist group is named in threatening emails received by Sofia Airport operators, according to messages reviewed by the airline and airport operator. The communications claimed that explosives had been placed aboard three Ryanair aircraft bound for Bulgaria and were signed in the name of the “Fighters of the Male State,” described as a Russian extremist movement. An identical threat was reported to have been sent to the operator of Rome’s airports, indicating a broader reach of the email campaign. The reports do not provide details on authentication, confirmed threats, or any actual devices, and no injuries or incidents are cited in the material provided.
The broader context surrounding the Sofia threat is recounted by Anadolu Ajansı and Atlas News as part of a wave of bomb-threat alarms across Europe on 3 November 2026. The coverage notes precautionary checks, evacuations, emergency landings, and heightened security responses involving multiple operators and countries, though specifics about each individual flight or airport vary by outlet. Poland, Spain, Italy, Austria, and the United Kingdom are among the regions noted in the cross-outlet reporting as experiencing related threat activity or follow-on security actions.
Within Poland, authorities diverted two inbound flights as part of the threat cluster. A LOT Polish Airlines Boeing 737 MAX 8, en route from London Heathrow to Warsaw, diverted to Warsaw-Modlin Airport and landed around 10:01 a.m. local time with 181 passengers and crew aboard; passengers were evacuated for inspection and perimeter security was established. Separately, a Scandinavian Airlines flight from Copenhagen to Warsaw landed at Warsaw Chopin Airport under emergency conditions, with passengers disembarking while police conducted investigations and airport operations continued, according to corroborating outlets cited in the material.
Spain’s response centered on Murcia-Corvera Airport, where a Ryanair flight carrying 121 people from Manchester landed safely around 10:30 a.m. local time after a bomb threat. The airport operator coordinated a large-scale response, isolating the aircraft and relocating passengers to a secure area for individual screening, with multiple agencies involved, including Guardia Civil, National Police, airport fire services, medical teams, and bomb-disposal units dispatched from Alicante, as reported by The Times of India and AirLive in the compiled material.
Italy reported an active security posture with fighter-jet escorts for Ryanair flights considered threats in Italian airspace. Intelligence indicated threats against two Ryanair services bound for Rome Fiumicino: one flight from Lisbon was escorted into Italian airspace and landed under heavy security, while a second flight from Dublin landed at Fiumicino and was moved to an isolated stand for thorough searches by bomb-disposal officers. The broader reporting cites heightened readiness and security measures by Italian authorities, with outlets including AirLive and Business Traveller among those sharing the developments. The pattern emphasizes precautionary risk management rather than confirmed explosive devices in these particular cases.
In Salzburg, Austria, a bomb-threat notification prompted a substantial police response, though the available material from Aviation.Direct indicates no confirmed disruption to flight schedules beyond the security posture described by the source. A large contingent of officers was dispatched, and authorities indicated ongoing operations without detailing suspect information or final outcomes. The reporting suggests standard precautionary procedures were enacted as part of the broader European threat pattern.
At Warsaw-Modlin, the London-origin diversion described in Atlas News and corroborated by UA.NEWS and The Times of India involved a Boeing 737 MAX with about 181 passengers on board. The aircraft was moved to a secure area for inspections while security forces conducted threat assessments, and passengers were later evacuated in an orderly manner as checks continued. Modlin Airport suspended operations temporarily during the verification process, with bomb-disposal units and coordinated security efforts referenced as part of the response framework.
Charleroi Airport in Belgium also figures in the cross-outlet material, where a lavatory message reading “bomb” was found onboard a flight bound for Charleroi. The Brussels Times identifies the incident as a false threat and notes that airport staff and security personnel led the investigation, with limited details about the flight airline or aircraft type available in the cited reporting. Inshorts connects this incident to the broader pattern of threat activity and mentions an Israeli airport evacuation and other European diversions in its broader synthesis, but does not provide specific flight identifiers for Charleroi.
Overall, the assembled material presents a pattern of bomb-threat alerts affecting European and related international aviation, with a focus on precautionary checks, evacuations, and enhanced security measures rather than confirmed devices or casualties. The reporting network across Novinite, Inshorts, Anadolu Ajansı, Aviation.Direct, The Brussels Times, Buffalo News, NL Times, and corroborating outlets emphasizes the coordinated, multi-country responses—diversions to secure areas, emergency landings, and elevated security procedures—while noting that no confirmed explosives or injuries are established in the material provided.