The boiling frog myth is biologically inaccurate, but geopolitically, it remains the most terrifying playbook in modern statecraft. Drop a frog into boiling water and it leaps out instantly. Put it in lukewarm water and slowly turn up the heat until it cooks to death, completely unaware of the changing temperature until it is far too late. NATO officials are now privately and publicly warning that Moscow is using this exact incremental strategy against Western nations.
Most people think a major conflict starts with a dramatic flash. A sudden invasion, a massive cyber blackout, or a barrage of missiles screaming across a continent. That is twentieth-century thinking. Today, the threat looks like mysterious undersea cable cuts, GPS jamming over the Baltic states, sabotage at rail hubs, and a relentless wave of state-sponsored disinformation designed to paralyze democratic decision-making.
Russia isn't trying to conquer Western Europe overnight. They are turning up the burner degree by degree so that every individual provocation feels just small enough not to trigger Article 5.
The Anatomy of Sub-Threshold Warfare
We are living in the gray zone. This space between formal peace and outright war is where modern security policy goes to die.
If a Russian fighter jet drops a bomb on Berlin, the response is automatic and catastrophic. Moscow knows this. Instead, they test the boundaries with actions that fall just beneath the threshold of traditional military retaliation. Think about the sabotage incidents across European critical infrastructure over the last few years. Warehouses catching fire in the UK, mysterious leaks in Baltic gas pipelines, and massive communications disruptions in Nordic rail networks.
Each individual event is written off as an accident, a localized malfunction, or a minor criminal act. Police investigate. Insurance companies pay out. Politicians issue standard statements of concern.
Nobody wants to escalate. That hesitation is precisely what Moscow banks on. By the time Western intelligence agencies connect the dots and prove a coordinated pattern of hybrid attacks, the psychological damage is already done. Citizens grow numb to the constant friction. Governments become paralyzed by risk aversion.
Why Traditional Deterrence is Failing
NATO was built for a different era. The alliance spent decades preparing for massed armored columns charging across the North European Plain. Cold War deterrence was simple: you mass troops, we mass troops, nobody shoots because everyone dies.
That logic breaks down when the adversary avoids kinetic military force altogether.
How do you deter a cyber attack that knocks out local power grids for four hours? How do you retaliate proportionally against a suspected cargo ship dragging its anchor across a fiber-optic cable in international waters?
If your response is too weak, you invite more aggression. If your response is too strong, you play right into the Kremlin's narrative that NATO is the aggressive party looking for a fight.
European leaders are trapped in a reactive loop. They respond to yesterday's crisis while Moscow is already engineering tomorrow's inconvenience. The infrastructure of daily life—power grids, financial networks, shipping lanes, and satellite constellations—becomes the battlefield. And because these systems are privatized, decentralized, and sprawling, they are inherently difficult to defend.
The Cost of Strategic Fatigue
The real danger of this slow-boil strategy isn't physical destruction. It is psychological exhaustion.
Support for Ukraine and defense spending generally require sustained political will. When energy prices spike due to deliberate supply manipulation, or when constant security alerts make citizens feel unsafe, public resolve frays. Populist political factions exploit this fatigue, arguing that European nations should mind their own business and stop funding foreign security architectures.
Russia understands Western democratic cycles better than Western politicians understand autocratic endurance. Moscow can sustain a low-level hybrid campaign for decades, absorbing economic sanctions and internal friction. Democracies, by contrast, face election cycles, shifting public moods, and economic pressures every few years.
When you make people tired, anxious, and economically squeezed, they stop caring about abstract geopolitical principles. They just want cheap gas and quiet news cycles. That is the victory condition for the Kremlin. They do not need to march tanks down the Champs-Elysees if they can convince European publics that their governments are incompetent and their alliances are useless.
Moving Beyond the Lukewarm Trap
Recognizing the trap is the first step toward escaping it. Western intelligence and military planners are slowly waking up to the reality that gray-zone aggression requires a fundamentally new defensive posture.
First, attribution must become public and immediate. When a hybrid attack occurs, hiding behind secrecy to protect sources and methods only aids the attacker. Exposing Russian operatives, naming the military units responsible, and broadcasting the evidence in real time strips away plausible deniability.
Second, resilience matters more than retaliation. You cannot deter every cyber probe or cable cut. You can, however, build redundant systems that bounce back in minutes rather than weeks. Hardening supply chains, decentralizing energy generation, and securing physical choke points alters the calculus for any adversary. If an attack costs millions to execute and yields zero strategic disruption because the target simply rerouted its traffic, the incentive vanishes.
Finally, political leaders need to stop treating hybrid attacks as isolated legal incidents. When a pattern of sabotage emerges, it must be addressed collectively as an act of sustained hostility.
The water is getting warmer, but Europe still has the agency to jump. Doing so requires discarding the comfort of normalcy and accepting that the rules of the security landscape have permanently changed.
