EU, France, NATO publicly attribute cyber campaign to FSB's 16th Centre

Published Jul 21, 05:30 AM UTC

On July 13, the European Union, France, and NATO publicly attributed a wide-ranging Russian cyber campaign to the Federal Security Service's 16th Centre (military unit 71330). The campaign involves an ecosystem of intelligence services, military units, criminal groups, proxy hackers, and private companies working toward strategic pressure against Europe and Ukraine. France identified the TURLA intrusion set, active since 2004, used for espionage against governmental, diplomatic, defense, and energy targets. Specific attacks include compromise of French Ministry of Armed Forces emails (2017), French Embassy in Moscow network (2018), and a justice-sector server (2019). Poland reported cyberattacks on critical infrastructure including water sanitation and energy sectors. The EU imposed sanctions on entities linked to TrickBot, Conti, and other groups. The analysis highlights Russia's distributed interception system across 11 centers, including Kaliningrad, posing a threat to NATO's eastern flank.