Russia Has Repeatedly Hit Us with Cyberattacks, France Claims
France's foreign ministry has taken a firm stance against Russian cyberattacks, explicitly accusing Russia's GRU military intelligence agency of mounting a campaign of cyber attacks on over a dozen entities in France since 2021. The accusations, leveled at GRU unit APT28, which officials said was based in Rostov-on-Don in southern Russia, mark the first time Paris has blamed the Russian state on the basis of its own intelligence.
The ministry's statement, released on Tuesday, revealed that APT28's attacks on France date back as far as 2015, when the popular television station TV5 Monde was taken off air in a hack claimed by purported Islamic State militants. France said APT28 had been behind the attack, and another in the 2017 presidential election when emails linked to the party and campaign of the eventual winner, Emmanuel Macron, were leaked and mixed with disinformation.
According to a report by France's National Cybersecurity Agency (ANSSI), APT28 has sought to obtain strategic intelligence from entities across Europe and North America. Officials said the government had decided to go public to keep the public informed at a time of uncertainty in domestic politics and over Russia's war in Ukraine.
The number of cyberattacks attributed to Russian actors has seen a significant increase, with 4,000 reported in 2024, an increase of 15% on 2023. The most recent attack by APT28 was in December, according to ANSSI. The agency also revealed that there had been a jump last year in the number of attacks on French ministries, local administrations, defense companies, aerospace firms, think tanks and entities in the financial and economic sector.
"These destabilizing activities are unacceptable and unworthy of a permanent member of the United Nations Security Council," the foreign ministry said. "Alongside its partners, France is determined to use all means at its disposal to anticipate, deter and respond to Russia's malicious behavior in cyberspace."
APT28: A Russian Spy Agency with a Long History
APT28 has been active worldwide since at least 2004, primarily in the field of cyberespionage, according to hacking experts. The GRU unit is known for its sophisticated cyber operations and has been linked to numerous high-profile attacks on governments, corporations, and individuals.
Germany Joins France's Criticism of Russia
In May 2024, Germany accused APT28 of launching cyberattacks on its defense and aerospace firms and ruling party, as well as targets in other countries. At the time, Russia's embassy in Berlin called the accusations "another unfriendly step aimed at inciting anti-Russian sentiments in Germany."
A Growing Concern for Cybersecurity
The recent string of cyberattacks attributed to Russian actors has raised concerns about the country's intentions and capabilities in the digital domain. As tensions between Russia and Western powers continue to escalate, it is clear that cybersecurity will play an increasingly important role in international relations.