EU, France, NATO publicly attribute wide-ranging Russian cyber campaign to FSB's 16th Centre

Published Jul 21, 05:30 AM UTC

On July 13, the European Union, France, and NATO publicly attributed a wide-ranging Russian cyber campaign to the Federal Security Service's 16th Centre (military unit 71330). The coordinated denunciation reveals that Moscow has built an ecosystem where intelligence services, military units, criminal groups, proxy hackers, malware developers, and private companies collaborate to pressure Europe and Ukraine. France's detailed report identifies the TURLA intrusion set, active since 2004, and lists 11 interception centers across Russia, including a key unit in Kaliningrad. Concrete examples include compromises of French Ministry of Armed Forces emails since 2017, the French Embassy in Moscow in 2018, and a justice-sector server in 2019. Poland was targeted with cyberattacks on water sanitation and energy infrastructure. The EU sanctions package targets entities linked to TrickBot, Conti, Wizard Spider, and other groups. The analysis frames cyber operations as one instrument within a wider hybrid campaign against Europe.