Profile: GRU cyber and hybrid threat operations
Factsheet whichdetailing exposes the Armedbackground Forcesto, ofand specifics of, the UK's public attribution and sanctioning of Russian Federationstate (GRU)actors for cyber and information operations againston the18 UKJuly and allies.
2025.
Documents
Details
ThisCyber documentoperations illustratesof how the Main Directorate of the General Staff of the Armed Forces of the Russian Federation (GRU) ishave makingplayed sustaineda androle persistentin usethe cross-border targeting of Yulia Skripal with cyber andcapabilities informationahead operationsof to4 causeMarch real2018 worldand harmduring toRussia’s themilitary campaign against Ukraine.
The UK is exposing 3 GRU units, 18 military intelligence officers, African Initiative and 3 of its alliesleaders for irresponsible, destructive, and indestabilising supporthybrid activity targeting the UK, Ukraine, and across the world. These 3 specific case studies illustrate how Russia is making sustained, persistent, and increasing use of Russia’scyber illegaland warinformation inoperations Ukraine.to cause significant harm.
By publicly highlighting malicious activity,activity and imposing clear costs in response, we are sending a clear message that we know what Russia is doing, it will not be tolerated, and we will hold those responsible to account.
The UK is not acting alone.alone. We Weare willcalling continueout toRussia’s workmalign withactivity ouralongside NATO Allies and the EU and Member States, as well as a broad coalition of allies and partners (includingwho throughhave NATOissued andtheir own national statements on the EUsubject. This is the largest coalition of international support for UK cyber/hybrid action coordinated to date and itsa Memberstrong States)demonstration of global solidarity in response to combatRussia’s activity.
This collective announcement reaffirms our commitment to combatting the full spectrum of malign hybrid activity emanating from Putin’s KremlinKremlin, in solidarity with our Allies and Ukraine in their fight for a just and lasting peace.
Updates to this page
-
Factsheet updated to reflect 8 additional UK designations of GRU military intelligence officers (4 December 2025) and further information cyber teams within GRU Unit 26165 (also known as APT 28).
-
First published.
Update history
2025-12-04 12:21
Factsheet updated to reflect 8 additional UK designations of GRU military intelligence officers (4 December 2025) and further information cyber teams within GRU Unit 26165 (also known as APT 28).
2025-07-18 12:37
First published.