EU, France, NATO publicly attribute cyber campaign to FSB's 16th Centre

Published Jul 21, 05:30 AM UTC

On July 13, the European Union, France, and NATO publicly attributed a wide-ranging Russian cyber campaign to the Federal Security Service's 16th Centre (military unit 71330). The coordinated denunciation reveals that Moscow has built an ecosystem integrating intelligence services, military units, criminal groups, proxy hackers, and private companies to pressure Europe and Ukraine. France detailed specific attacks since 2017, including compromises of the Ministry of Armed Forces, the French Embassy in Moscow, and a justice-sector server. The TURLA intrusion set, active since 2004, targets governmental, diplomatic, defense, and energy sectors. Poland was identified as a recent target of cyberattacks with sabotage objectives against water sanitation and energy infrastructure. The EU response includes sanctions against entities linked to TrickBot, Conti, and other malicious tools. The analysis highlights Russia's distributed interception system across eleven centers, including a key unit in Kaliningrad threatening NATO's eastern flank.