The escalating cyber war between Russia and the West has taken a significant turn as the UK and EU unveil their first joint sanctions package, targeting 24 individuals and entities implicated in malicious cyber-attacks and disinformation campaigns across Europe. This coordinated effort represents a major escalation in international efforts to counter what is increasingly seen as Russia's reckless attempts to sow chaos and division through its proxy networks.
The sanctions specifically target senior leaders within the GRU (Main Intelligence Directorate), including Vyacheslav Stafeyev, Ivan Senin, and Ivan Kasyanenko, accused of directing GRU cyber and hybrid threat operations. The GRU's Unit 29155 cyber division is also implicated in collaborating with cybercriminals, including the company IMPULS, to recruit hackers from Russian universities and academies.
The UK government has publicly blamed Russia's FSB Centre 16 for a failed cyber-attack on Poland's energy grid, which could have resulted in power loss for up to 500,000 citizens during winter. Foreign Secretary Yvette Cooper condemned the attack, stating that the sanctions "strike at the core of the cybercriminal networks propping up the Russian state’s aggression" and send a clear message that Russia "cannot hide behind its use of these proxy groups."
The new measures also focus on individuals behind "Lumma Stealer," a sophisticated malware used by cybercriminals to collect sensitive information from compromised devices on a large scale. The UK government revealed that Russia has exploited credentials stolen via Lumma Stealer to conduct cyber espionage operations globally, supporting the Kremlin's objectives. In the UK alone, at least 2,100 victims of Lumma Stealer have been identified in the past six months, directly impacting British businesses.
Ten individuals associated with Rybar LLC, a Russian state-resourced media company, have also been sanctioned. The company is accused of disseminating false narratives about Ukraine and interfering in European elections, including those in Moldova and Armenia. The UK government reaffirmed its commitment to disrupting malign activities on behalf of the Russian state and exposing those responsible for spreading disinformation that undermines democratic values.