Putin Names Former Rostec Cyber Executive to Security Council Role Amid Reported GRU Link
Summary
Putin appointed former Rostec cybersecurity executive Andrei Kozlov as aide to Security Council Secretary Sergei Shoigu. The Insider reported leaked data linking Kozlov’s clearance to GRU unit 26165, associated with APT28; the connection remains alleged.
Key points
- Vladimir Putin appointed Andrei Kozlov, a former Rostec cybersecurity executive, as an aide to Security Council Secretary Sergei Shoigu.
- The Insider reported that leaked data linked Kozlov’s classified security clearance to Military Unit 26165; the article does not independently confirm the link.
- Western governments and cybersecurity firms have linked Military Unit 26165, also known as the 85th Main Special Service Center, to Fancy Bear, also tracked as APT28, BlueDelta and Forest Blizzard.
- Kozlov previously led RT-Information Security, also known as RT-IB, a cybersecurity center operated by Rostec.
- Kozlov’s predecessor, Pavel Konovalchik, was also reportedly linked to the same military unit, according to The Insider.
Article Details
- Event Type
- Appointment of a former cybersecurity executive as an aide to Russia’s Security Council Secretary, amid reported ties to a GRU-linked hacking unit.
- Impact
- Andrei Kozlov’s appointment places a former Rostec cybersecurity executive in a senior national-security advisory body. Leaked data reportedly tied Kozlov to Military Unit 26165; the article does not establish that he engaged in cyber operations.
People
Andrei KozlovFormer head of RT-Information Security, also known as RT-IB, and former head of a cybersecurity-sector association; appointed as an aide to Security Council Secretary Sergei Shoigu. Leaked data reportedly tied him to a classified clearance under Military Unit 26165.Pavel KonovalchikKozlov’s predecessor in the Security Council role; The Insider reportedly linked him to Military Unit 26165.Sergei ShoiguSecurity Council Secretary and the official to whom Andrei Kozlov was appointed as an aide.Vladimir PutinRussian president who appointed Andrei Kozlov as an aide to the Security Council Secretary.
Threat Actors
APT28Identified in the article as another tracking name for Fancy Bear, which has been accused of cyber espionage, credential theft, and influence operations.BlueDeltaIdentified in the article as another tracking name for Fancy Bear, which has been accused of cyber espionage, credential theft, and influence operations.Fancy BearThe article says Western governments and cybersecurity firms link this group to Military Unit 26165. It has been accused of cyber espionage, credential theft, and influence operations targeting governments, defense contractors, logistics companies, and policy organizations.Military Unit 26165Described as a GRU-linked hacking unit and associated with Fancy Bear. The article says leaked data reportedly placed Kozlov’s classified clearance under this unit; it does not establish his participation in the unit’s cyber activity.
Vendors
RostecRussian President Vladimir Putin has appointed Andrei Kozlov, a former Rostec cybersecurity executive, as an aide to Security Council Secretary Sergei Shoigu.RT-IBEarlier, in 2022, Kozlov served as acting general director of RT-Information Security, also known as RT-IB, a cybersecurity center operated by Rostec.
Countries
Industries
DefenseAndrei Kozlov, the former head of a cybersecurity center within Russia’s state-owned defense conglomerate Rostec, was named an aide to Security Council Secretary Sergei Shoigu on Friday.logisticscyber espionage, credential theft and influence operations targeting governments, defense contractors, logistics companies and policy organizations across Europe and the United States.