EU denounces Russia’s malicious cyber ecosystem targeting Union and its international partners

Today, the EU and its member states denounced Russia’s malicious cyber activities and leveraging of a cyber ecosystem encompassing state and non-state actors, ranging from intelligence services to cybercriminals groups, hacktivists and private companies.

The Council of the European Union has exposed the 16^th Centre of Russia’s Federal Security Service (FSB) as controlling a variety of cyber threat groups including TURLA. 

“For years, the FSB has conducted a wide range of malicious cyber activities with growing severity affecting the EU, its member states, as well as international partners, notably Ukraine. These activities have included infiltration of governmental networks and sabotage of critical infrastructure,” the Council said in a press release.

Among others, France, Germany, Poland, Cyprus, the Netherlands, Austria, Slovakia, Romania and Finland have been targeted. In France, the 16^th Centre has conducted cyber espionage against strategic governmental entities since 2010 and defence industry in 2025. In Germany, it has targeted governmental entities. Recently in Poland, the 16^th Centre has carried out disruptive sabotage operations against critical infrastructure, including combined heating and power plants.

According to the Council, cybercriminals, self-proclaimed hacktivists and private companies linked to Russia, including actors operating under its instructions, direction or control, have also carried out, enabled and facilitated a wide range of malicious activities. 

The EU has strongly condemned Russia’s malicious activities and imposed restrictive measures on nine individuals and four entities. These EU sanctions include GRU intelligence officers, cybercriminals, self-proclaimed hacktivists, and private companies.

Find out more

Press release