cyber.hendryadrian.com
Security News · cyberscoop.com

EU and UK Sanction Russian Entities Over Alleged Turla Espionage and Cyberattacks

· Original article ↗

Summary

The EU and UK imposed sanctions on Russian individuals and entities over alleged cyberespionage and destructive attacks, including activity attributed to Turla. The EU cited a 2010-onward campaign; the UK also targeted figures linked to GRU activity and Lumma Stealer.

Key points

  • The EU sanctioned nine Russian individuals and four entities, while the UK announced sanctions covering 24 individuals and entities.
  • The EU attributed a cyberespionage campaign dating to 2010 to Turla, also known as Secret Blizzard and Waterbug, and cited targeting across multiple European countries.
  • The EU specifically blamed the FSB for attacks on Poland’s energy grid last December; the article says the attacks left half a million people without heat.
  • The UK named GRU figures Vyacheslav Stafeyev, Ivan Senin and Ivan Kasyanenko over alleged hybrid cyberattacks and recruitment of hackers.
  • The UK also sanctioned individuals behind Lumma Stealer, which had been targeted in an international takedown.
  • Separately, 13 countries warned that Russian government hackers were targeting routers for attacks on critical infrastructure.

Article Details

Event Type
Coordinated EU and UK sanctions against Russian individuals and entities over cyberespionage, destructive cyberattacks, and cybercriminal activity linked to Russia.
Impact
The EU linked Turla activity dating to 2010 to targeting government entities in several European countries. Poland’s energy grid attack last December, which the article says left half a million people without heat, was specifically blamed on Russia’s FSB. The UK also sanctioned GRU figures over alleged cyberattacks and recruitment activity, and individuals behind Lumma Stealer. Separately, the EU sanctioned the company behind the Max messaging app, citing surveillance features, and 13 countries warned about Russian government hackers targeting routers for critical-infrastructure attacks.

People

Kaja KallasThe EU High Representative whose statement described malicious activities linked to Russia and the sanctions.Yvette CooperThe UK Foreign Secretary who commented on the sanctions and alleged Russian state-linked cyber activity.

Threat Actors

Center 16The article says EU sanctions targeted Center 16 of the FSB over its reported control of the Turla cyber threat group.FSBThe article says the FSB was specifically blamed for last December’s attack on Poland’s energy grid and links its Center 16 unit to control of Turla.GRUThe UK sanctioned senior GRU figures over their alleged involvement in hybrid cyberattacks and recruitment of hackers.Ivan KasyanenkoThe UK named and sanctioned him as a GRU senior leadership figure over alleged hybrid cyberattacks and hacker recruitment.Ivan SeninThe UK named and sanctioned him as a GRU senior leadership figure over alleged hybrid cyberattacks and hacker recruitment.TurlaThe EU linked Turla to a cyberespionage campaign against European targets dating back to 2010. The article says Turla is also known as Secret Blizzard and Waterbug.Vyacheslav StafeyevThe UK named and sanctioned him as a GRU senior leadership figure over alleged hybrid cyberattacks and hacker recruitment.

Malware

Lumma StealerThe actions also highlighted attacks on Poland’s energy grid, sanctions related to Lumma Stealer, and warnings about Russian hackers targeting routers for critical infrastructure attacks.

Products

MaxAlso Monday, the European Union announced sanctions against the company behind Russia’s messaging app, Max, citing its use of surveillance features to clamp down on dissent.

Countries

Austriathe government there, and has also featured activity against Germany, Poland, Cyprus, the Netherlands, Austria, Slovakia, Romania and Finland.Cyprusin France with targeting of the government there, and has also featured activity against Germany, Poland, Cyprus, the Netherlands, Austria, Slovakia, Romania and Finland.FinlandThe EU cited attacks on multiple countries, including France, Germany, Poland, and Finland.FranceThe EU cited attacks on multiple countries, including France, Germany, Poland, and Finland.GermanyThe EU cited attacks on multiple countries, including France, Germany, Poland, and Finland.Netherlandstargeting of the government there, and has also featured activity against Germany, Poland, Cyprus, the Netherlands, Austria, Slovakia, Romania and Finland.PolandThe actions also highlighted attacks on Poland’s energy grid, sanctions related to Lumma Stealer, and warnings about Russian hackers targeting routers for critical infrastructure attacks.Romaniaand has also featured activity against Germany, Poland, Cyprus, the Netherlands, Austria, Slovakia, Romania and Finland.RussiaPoland’s energy grid attack last December was specifically blamed on Russia’s FSB.Slovakiathere, and has also featured activity against Germany, Poland, Cyprus, the Netherlands, Austria, Slovakia, Romania and Finland.

Industries

EnergyThe actions also highlighted attacks on Poland’s energy grid, sanctions related to Lumma Stealer, and warnings about Russian hackers targeting routers for critical infrastructure attacks.GovernmentMonday over what they said was a years-long campaign of cyberespionage from Turla and other Russian government-led “destructive attacks” against the bloc.

Related Articles