UK accuses Russian spies of global cyberattacks campaign

National Cyber Security Centre has identified operatives from the GRU as behind high-profile computer attacks

Man behind laptop, man hacker, laptop on desk. Getty Images
Powered by automated translation

British foreign secretary Jeremy Hunt on Thursday accused Russian military intelligence of conducting a campaign of “indiscriminate and reckless” online attacks targeting political institutions, businesses, media and sport bodies around the world.

Britain’s National Cyber Security Centre (NCSC) has identified operatives from Russia’s GRU arm as being behind various high-profile computer attacks, according to the Foreign Office.

Many have been previously linked to Moscow, including the 2017 BadRabbit ransomware targeting of a Ukrainian international airport and Russian media outlets, and last year’s attempted hacking of the World Anti-Doping Agency in Switzerland.

_______________

Read more:

EU to crack down on online terrorism and cyber threats

Iranian diplomat accused of running web of spies across Europe

German spooks: Iran's growing cyber capabilities poses danger

_______________

“This pattern of behaviour demonstrates their desire to operate without regard to international law or established norms and to do so with a feeling of impunity and without consequences,” Mr Hunt said in a statement.

“Our message is clear: together with our allies, we will expose and respond to the GRU’s attempts to undermine international stability.”

The NCSC has “high confidence” that the GRU was “almost certainly” responsible for the 2017 attacks, as well as others including the infamous targeting of the US Democratic Party ahead of the 2016 presidential election, according to Whitehall sources.

The British government holds the Kremlin ultimately responsible for the cyber campaign, they said.

The Foreign Office described it as a “flagrant violation of international law” that had cost national economies millions of pounds.

“These cyberattacks serve no legitimate national security interest, instead impacting the ability of people around the world to go about their daily lives free from interference, and even their ability to enjoy sport,” Mr Hunt added.

“The GRU’s actions are reckless and indiscriminate: they try to undermine and interfere in elections in other countries; they are even prepared to damage Russian companies and Russian citizens.”

The hackers identified as GRU operatives by the NCSC include an entity variously called APT28, Pawn Storm, Sandworm, Fancy Bear and the Sofacy Group.

The Justice Department in the United States has previously blamed the group for conducting numerous hacking operations there and around the world.

They include targeting everything from American political parties and the websites of conservative US think tanks to key infrastructure industries like power grids.

Malcolm Chalmers, deputy director general at the Royal United Services Institute, said the GRU’s activities “go well beyond traditional peacetime espionage”.

“By launching disruptive operations that threaten life in target societies, they blur the line between war and peace,” he added.