Intelligence ministry says operatives planned to use anti-regime riots as cover to carry out 'hybrid terrorist operations,' promises details soon on ringleader in Europe