UK sanctions senior Russian GRU officers over cyberattacks

The United Kingdom announced on Friday that it has imposed sanctions on more than 20 Russian spies, hackers, and organisations, accusing them of engaging in a sustained campaign of malicious cyber activity targeting European governments and institutions.

The British Foreign Office said the measures were directed at three units of Russia’s military intelligence agency, the GRU, along with 18 of its officers. The individuals sanctioned include those allegedly involved in cyberattacks, strikes on Mariupol during the war in Ukraine, and the surveillance of former double agent Sergei Skripal and his daughter Yulia ahead of the 2018 Novichok poisoning in Salisbury.

“GRU spies are running a campaign to destabilise Europe, undermine Ukraine’s sovereignty, and threaten the safety of British citizens,” Foreign Secretary David Lammy said in a statement accompanying the announcement.

The UK has long accused Moscow of orchestrating malign activities that range from espionage and cyberattacks to political interference, sabotage, and assassinations. The latest sanctions come just weeks after three men were convicted of carrying out an arson attack on a London business with ties to Ukraine, which police said was ordered by Russia’s Wagner mercenary group.

Russia has consistently denied any involvement in such activities, calling the allegations politically driven and unfounded. The Russian embassy in London did not immediately respond to requests for comment.

European allies condemn Russian cyber campaigns

Britain’s move was echoed by the European Union and NATO, which issued statements on Friday denouncing what they described as Russia’s ongoing hybrid warfare tactics aimed at destabilising the West.

Among the newly sanctioned GRU units are Units 29155, 26165, and 74455. According to the UK government, these groups were involved in cyber operations against media outlets, telecom networks, democratic institutions, and energy infrastructure across the UK and Europe.

The UK cited a number of high-profile incidents allegedly linked to these units, including the 2020 hacking of the Estonian government, the 2015 cyberattack on the German Bundestag, the 2016 breach of the U.S. Democratic National Committee, and cyber operations targeting the Paris 2024 Olympic Games.

The Foreign Office also stated that Unit 26165 conducted surveillance of the Mariupol Theatre in March 2022 before it was bombed. Ukrainian officials reported that around 300 civilians were killed in the strike. Russia has denied deliberately targeting civilians.

Sanctions also target influence operations in Africa

In addition to the cyber-focused sanctions, the UK government also announced punitive measures against three leaders of the "African Initiative," which it described as a Kremlin-funded disinformation operation. The initiative allegedly used social media platforms to carry out influence campaigns in West Africa, in line with Russia's broader information warfare strategy.

The UK has recently increased its defence budget and revised its national security priorities to address evolving threats, including those posed by cyberattacks, nuclear risks, and Russia’s hybrid tactics.

Friday’s sanctions mark yet another step in Britain’s effort to counter what it sees as an intensifying Russian threat to European stability and democratic integrity.

Copied