France and EU attribute Turla cyberattacks on French entities to Russian FSB 16th Center

Published Jul 13, 10:00 AM UTC

On July 13, 2026, France and the European Union formally attributed a long-running campaign of malicious cyber activities and cyber-espionage targeting French public and private entities to the 16th Center of the Russian Federal Security Service (FSB). The campaign, using the Turla attack method (TTP), has been observed since the 2010s, particularly affecting the diplomacy, defense, justice, and technology sectors. The attribution was led by France's Cyber Crisis Coordination Center (C4), which includes ANSSI, COMCYBER, the DGA, DGSE, and DGSI. This follows a similar attribution in April 2025 of the APT28 method to Russia's GRU. The announcement aims to remind Russia of its responsibilities, signal French monitoring of Russian offensive cyber operations, and raise awareness of the Russian cyber threat amid an intensification of hybrid attacks against France, Ukraine, NATO, and the EU.

Content shown outside its original language is machine translated and condensed.