The EU blacklists Russian intelligence group members it says were responsible for spying on and hacking targets across the EU and Ukraine from as early as 2010
Politico
Context & Ripple Effects
The EU’s latest action extends a record of publicly attributing Russia-linked cyber activity: it formally accused the Russian government and state hackers over the Ghostwriter campaign in 2021, while earlier reporting described alleged targeting of European research groups and an intrusion at the EU’s Moscow embassy.
The case matters because the alleged activity spans EU targets and Ukraine over a long period, turning years of reported espionage and disruption into a named EU accountability action against members of a Russian intelligence group.
First-order effects
The listed individuals are immediately designated by the EU in connection with the alleged espionage and hacking campaign, increasing the official and legal consequences attached to their identities.
The EU has formally tied the alleged campaign to Russian state intelligence, strengthening its public attribution of activity affecting member-state and Ukrainian targets.
Second-order effects
EU institutions and member states gain a clearer basis to align cyber-defense, investigative, and diplomatic responses around the same attributed actor and campaign history.
The action raises the reputational and operational cost for actors linked to Russian intelligence to maintain access or relationships within EU jurisdictions, while putting pressure on Moscow to contest or absorb the attribution.
Third-order effects
If such designations continue, EU cyber policy is likely to treat persistent state-linked intrusion campaigns not only as security incidents but as matters for coordinated economic and diplomatic accountability.
The broader test will be whether attribution and blacklisting materially deter repeat operations; the related coverage shows alleged activity has persisted despite prior public accusations.
The trend: This is part of the EU’s shift toward pairing public cyber attribution with collective restrictive measures against state-linked actors accused of long-running operations against European and Ukrainian targets.
#ICYMI: Russian intelligence services continue to target current and former U.S. government and military officials, journalists, and other high-profile individuals by posing as support personnel on messaging apps like Signal and WhatsApp. These malicious cyber actors seek to [ima…
The EU and NATO statements have once again exposed Russia's malicious cyber activities. We call on Russia to immediately refrain from conducting cyberattacks and to respect international law. Read more ⤵️ https://www.gov.pl/...
Russia continues to conduct cyber-attacks against the EU, its Member States, and our partners. Today, the EU is exposing not only Russia FSB, but also the wider ecosystem of actors Russia relies on to carry out these attacks. We are also sanctioning individuals and entities who […
Today, the EU adopted its cyber sanctions package and exposed malicious cyber actors in Russia, incl. the FSB. Finland condemns Russia's malicious cyber activities and the misuse of the cyber ecosystem. In response, I have summoned the Ambassador of the Russian Federation.
Today, Ukraine joins the North Atlantic Council's Statement condemning Russia's malicious cyber activities. Russia's criminal war is fought not only on the battlefield in Ukraine. It also targets the critical infrastructure of Allies through malicious cyber operations,
The EU today adopted its largest cyber sanctions package ever and exposed malicious actors within the Russian cyber ecosystem, including the FSB. Sweden and the EU will continue to deter and respond to Russia's threats to the EU and its Member states. https://www.consilium.europa…
Today, the NCSC, alongside international allies, has published a new advisory on defending against the threat from Russian state intelligence actors. To read more on the threat and how to mitigate it ⬇️ https://www.ncsc.gov.uk/... [image]
We're sanctioning Russia at speed and scale. Today's measures, together with the upcoming 21st sanctions package, will add 250 individuals and entities to the Russia sanctions regime. This is our biggest round of individual designations since Moscow's 2022 full-scale invasion, …
Bottomline: after a 6 months wait, a joint attribution and a bunch of sanctioned individuals. That's an awfully normal response to a worryingly unusual attack, if you ask me. What message do we think that sends? What Stringer Bell would call « a 40-degree day ». therecord.medi…
There are new Internet services sanctions in the UK: — https://www.gov.uk/... I've been through them, and I did not spot any new domains/URLs for blocking. — https://decoded.legal/...