EU and UK Sanction Russian Hackers Over Cyberattacks on Europe

The European Union and the United Kingdom have announced a new round of sanctions against Russian individuals and organizations accused of carrying out cyberattacks and hybrid operations across Europe.

The measures target intelligence officers, cybercriminals, private companies, and malware operators that authorities say helped destabilize European governments and critical infrastructure.

EU and UK Expand Sanctions

The Council of the European Union imposed sanctions on nine individuals and four entities linked to Russian cyber operations.

At the same time, the United Kingdom sanctioned 24 individuals and organizations, including senior officers from Russia’s military intelligence agency (GRU).

British authorities identified Vyacheslav Stafeyev, Ivan Senin, and Ivan Kasyanenko as key figures who allegedly directed cyber and hybrid operations.

The UK also sanctioned members of the Russian company IMPULS, accusing the firm of recruiting hackers from Russian universities.

Lumma Stealer Operators Also Targeted

British authorities included individuals connected to the Lumma Stealer malware operation in the latest sanctions.

Officials linked the malware campaign to at least 2,100 victims in the UK over a six-month period.

The sanctions also cover ten people associated with Rybar LLC. Authorities accuse the media organization of spreading anti-Ukraine propaganda and attempting to influence elections in Moldova and Armenia.

EU Links FSB Unit to Multiple Hacking Groups

The Council of the European Union also publicly identified the 16th Centre of Russia’s Federal Security Service (FSB)as the organization directing several well-known cyber threat groups, including Turla.

According to EU officials, the unit has spent more than a decade conducting cyberespionage campaigns against government agencies, defense organizations, and critical infrastructure across Europe.

Countries affected include France, Germany, Poland, Cyprus, the Netherlands, Austria, Slovakia, Romania, and Finland.

Poland Recently Blocked Russian Cyberattacks

European officials also connected Turla to a recent failed cyberattack against Poland’s critical infrastructure.

The attackers reportedly targeted energy organizations, including heat and power plants. A successful attack could have disrupted electricity supplies for approximately 500,000 people during winter.

Separately, Polish authorities recently stopped another cyberattack targeting the National Centre for Nuclear Research, the country’s leading government nuclear research institute.

Earlier investigations also linked the Russian state-backed Sandworm hacking group to attacks against Poland’s power grid. Although those attacks damaged operational technology equipment, they failed to interrupt electricity supplies.

Europe Strengthens Cybersecurity Response

The latest sanctions follow broader European efforts to strengthen cybersecurity against state-sponsored threats.

Earlier this year, the European Commission proposed new cybersecurity legislation aimed at improving protections for critical infrastructure throughout the European Union.

In March, the Council of the European Union also sanctioned three Chinese and Iranian companies that authorities accused of coordinating cyberattacks against critical infrastructure in EU member states.