Avrupa’yı sarsan Rus köstebeği: Ajan Egisto Ott ve Wirecard skandalı
GZT · 2026-07-14
💡 Quick Take
1. Egisto Ott, former BVT analyst, extracted personal data on Russian dissidents and passed it to Russian intelligence.
2. Martin Weiss, Ott’s former BVT supervisor and later Wirecard employee, coordinated target lists and channeled stolen material.
3. Jan Marsalek, former Wirecard executive, acted as a Russian FSB asset and managed the pan‑European “Minions” cell.
4. Orlin Roussev led a six‑person Bulgarian spy cell in Great Yarmouth, handling logistics, courier work and device smuggling.
5. The Russian FSB Fifth Service oversaw the European network, providing strategic direction and payments.
6. From 2015‑2021 Ott performed illegal data queries and transferred the information to his personal Gmail account.
7. In 2017 Western agencies warned Austria; Ott was removed from active BVT duty and reassigned to the Police Academy.
8. The Wirecard scandal collapsed in June 2020, exposing Marsalek’s Russian links.
9. In August 2019 Ott authored the post‑operation analysis for the FSB after the assassination of Chechen dissident Zelimkhan Khangoshvili in Berlin.
10. Ott was arrested in Vienna on 20 May 2026; the trial revealed €80 000 in cash payments.
11. Courier routes for stolen SINA‑S laptops and Ministry of Interior phones operated in 2022‑2023; the Bulgarian cell was dismantled in London (2023).
12. The network extracted passports, addresses, phone logs, travel histories and private correspondence of Russian dissidents and journalists.
13. Ott accessed Austrian government databases (BVT) without authorization and forwarded data to personal accounts and the “Minions” cell.
14. Encrypted hardware (SINA‑S laptops, mobile phones) was physically smuggled via a courier chain: Vienna → Munich → Budapest → Istanbul → Moscow.
15. The group produced intelligence‑analysis reports for the FSB, including a post‑mortem of the Khangoshvili assassination.
16. State secrets were leaked to far‑right Austrian MP Hans‑Jörg Jenewein, resulting in a suspended sentence for the MP.
17. Payments of €20 000 per assignment (total €80 000) were handed in cash envelopes, roughly 19 months of Ott’s salary.
18. Coordination used encrypted Telegram channels; Marsalek used the pseudonym “Rupert Tiecz”.
19. International courier routes and “shadow” financial flows through Wirecard accounts facilitated logistics.
20. BVT president Peter Gridling removed Ott from active duty in 2017, but bureaucratic constraints prevented outright dismissal.
21. Over 300 individuals, including journalists Christo Grozev and Roman Dobrokhotov, were compromised.
22. Austrian interior‑ministerial phones and a SINA‑S laptop were compromised, exposing EU‑level communications.
23. European dissidents and journalists experienced heightened fear; Vienna’s reputation as a safe haven was tarnished.
24. Legal outcomes: Ott’s 2026 arrest; Weiss later fled to Dubai; Roussev’s cell was raided in Great Yarmouth (2023).
25. Video creators GZT stress that material comes from open‑source archives and is woven into a “fictional narrative”.
26. Marsalek’s “honey‑trap” with Natalia Zlobina expanded his espionage network.
27. Marsalek facilitated money‑laundering for Chechen leader Ramzan Kadyrov and met former French President Sarkozy, Erich Vad, and attempted to meet Wolfgang Schüssel.
28. He collaborated with Wagner‑linked figures, dining with Anatoly Karazy and traveling to Beirut → Syria, producing Palmyra photographs.
29. Contact with Spetsnaz veteran Petlinsky opened “deep corridors” of Russian intelligence for Marsalek.
30. Marsalek staged an escape to the Philippines, actually fled to Belarus → Moscow, and assumed the fake Orthodox priest identity “Konstantin Bayazov”.
31. Weiss acted as Marsalek’s conduit while on sick‑leave (2015‑2017) and later fled to Dubai with Marsalek’s assistance.
32. Austrian politics: a coalition of Social Democrats and FPÖ under Sebastian Kurz, with the FPÖ controlling the Ministry of the Interior, created BVT vulnerability.
33. Ott’s arrest and sentencing: March 29 2024 dawn raid; May 2026 conviction (four years + one month); appeal pending.
34. In 2000, a 19‑year‑old Markus Marsalek entered Wirecard as technology director (salary 9 000 DM).
35. In 2013 the “honey‑trap” with Natalia Zlobina gave Marsalek elite contacts and a lavish lifestyle.
36. In 2013 Marsalek laundered ≈ $100 million for Kadyrov, masking it as “Asian horse investments”.
37. Through Zlobina, Marsalek dined with Sarkozy, met Erich Vad, and attempted (unsuccessfully) to meet Wolfgang Schüssel.
38. On 5 May 2017, Marsalek’s dinner with Anatoly Karazy led to a private‑jet flight to Beirut → Syria; he sought Wagner assistance against Daesh and photographed Palmyra.
39. Petlinsky provided Marsalek with a forged identity and pathways into Russian intelligence.
40. On 25 June 2020, Marsalek’s disappearance was staged as a Philippines escape (pilots hired by Weiss) but he actually traveled to Belarus, then Moscow, adopting the priest persona.
41. Upon arrival in Moscow, Marsalek received FSB custody, a new identity, and a “second life” as a valuable Russian asset.
42. Weiss, while on sick‑leave (2015‑2017), relayed Marsalek’s orders to Ott; after returning to BVT in 2017 he was detained alongside Ott for alleged misuse of classified data.
43. The Austrian coalition under Kurz, with FPÖ control of the Interior Ministry, allowed Russian influence to expand within BVT.
44. Ott’s arrest details: 29 March 2024 dawn raid detained Ott and his son‑in‑law; May 2026 conviction; sentenced to 4 years + 1 month; appeal pending.
45. The “Ott file” shows how state‑level data can be weaponised for commercial and political aims, exposing systemic vulnerabilities and prompting calls for EU‑wide legal safeguards.
46. Key take‑aways: personal vulnerabilities (honey‑trap) can build espionage networks; financial institutions can serve as gateways for state‑sponsored laundering and intelligence; political coalitions granting security ministries to sympathetic parties create exploitable entry points; procedural safeguards can delay enforcement; EU‑wide regulations are needed to protect state data.
📊 Detailed Explanation
1. Egisto Ott, a 63‑year‑old former analyst at Austria’s Federal Office for the Protection of the Constitution (BVT), used his privileged access to pull personal data—passport numbers, home addresses, phone logs, travel histories, and private correspondence—on Russian dissidents and investigative journalists. He then transmitted this information to Russian intelligence services, effectively acting as a field operative for the FSB Fifth Service.
2. Martin Weiss, once Ott’s supervisor at BVT and later an employee of the fintech firm Wirecard, acted as the internal coordinator. He supplied Ott with target lists, received the stolen material, and funneled it into the broader Russian‑linked espionage network.
3. Jan Marsalek, a former senior executive at Wirecard, was identified by investigators as a Russian FSB asset. He oversaw the pan‑European “Minions” cell, financed its activities through Wirecard’s financial infrastructure, and directed operational priorities.
4. Orlin Roussev headed a six‑person Bulgarian spy cell based in Great Yarmouth, United Kingdom (code‑named “Minions”). His responsibilities included logistics, courier work, and smuggling of encrypted devices such as SINA‑S laptops.
5. The Russian FSB Fifth Service provided strategic oversight, direction, and monetary payments to the European espionage ring, linking the disparate actors under a unified command structure.
6. Between 2015 and 2021, Ott conducted illegal queries against Austrian government databases and routed the extracted data to a personal Gmail account, bypassing official channels and security protocols.
7. In 2017, after alerts from Western intelligence agencies (CIA and MI6) about Ott’s activities, Austrian authorities removed him from active BVT duties and reassigned him to the Police Academy, limiting his direct access to classified systems.
8. The Wirecard scandal collapsed in June 2020, bringing to public attention Marsalek’s connections to Russian intelligence and revealing financial irregularities that underpinned the espionage network.
9. In August 2019, after the assassination of Chechen dissident Zelimkhan Khangoshvili in Berlin, Ott authored a post‑operation analysis report for the FSB, demonstrating his role in providing intelligence assessments for Russian operations.
10. On 20 May 2026, Austrian police arrested Ott in Vienna on espionage charges. The subsequent trial disclosed that he had received €80 000 in cash payments for his services.
11. During 2022‑2023, a courier network
Kanal: GZT