The EU and its member states denounce Russia’s malicious cyber activities and leveraging of a cyber ecosystem encompassing state and non-state actors, ranging from intelligence services to cybercriminals groups, hacktivists and private companies. Today, we expose the 16th Centre of Russia’s Federal Security Service (FSB) as controlling a variety of cyber threat groups including TURLA. For years, the FSB has conducted a wide range of malicious cyber activities with growing severity affecting the EU, its member states, as well as international partners, notably Ukraine. These activities have included infiltration of governmental networks and sabotage of critical infrastructure. Among others, France, Germany, Poland, Cyprus, the Netherlands, Austria, Slovakia, Romania and Finland have been targeted. In France, the 16th Centre has conducted cyber espionage against strategic governmental entities since 2010 and defence industry in 2025. In Germany, it has targeted governmental entities. Recently in Poland, the 16th Centre has carried out disruptive sabotage operations against critical infrastructure, including combined heating and power plants. Cybercriminals, self-proclaimed hacktivists and private companies linked to Russia, including actors operating under its instructions, direction or control, have also carried out, enabled and facilitated a wide range of malicious activities. We strongly condemn Russia’s behaviour and misuse of this cyber ecosystem, targeting public services and critical infrastructure, causing disruptions and financial losses. In response to malicious activities, the EU is also imposing restrictive measures on nine individuals and four entities. These EU sanctions include GRU intelligence officers, as well as cybercriminals, self-proclaimed hacktivists and private companies that contribute to Russia’s efforts to destabilise the EU, its member states and international partners. We welcome our close coordination with the United Kingdom in our shared assessment of the growing convergence between non-state and state actors. We will continue to strengthen cooperation with international partners, including NATO, in full respect of the agreed guiding principles, in support of a global, free, open, stable and secure cyberspace. By calling out Russia’s malicious behaviour and imposing costs to those responsible for such activities, the EU underscores its determination to uphold accountability in cyberspace. All states, including Russia, should adhere to the United Nations framework of responsible state behaviour in cyberspace and its norms and respect international law.
|