according to official reports, three distinct GRU units have been implicated in a multi-year campaign of cyberattacks. These operations have targeted critical infrastructure, including telecommunications companies, media outlets, political institutions, and energy sectors throughout Europe. Notable incidents include attacks against the Estonian government in 2020, the German parliament in 2015, and the Paris Olympics last year. In 2016, the Democratic Party in the United States was also a target.

The NCSC detailed that one of the GRU teams developed the “AUTHENTIC ANTICS” tool, which exploits Microsoft‘s cloud services to surreptitiously acquire user login information. While the NCSC has not disclosed the specific targets of this particular tool, they have linked one of the sanctioned groups to the events at the Mariupol Theater, which was bombed in March 2022. Furthermore, members of these groups are alleged to have been involved in the espionage activities related to the 2018 poisoning of former Russian double agent Sergei Skripal.

Members of these groups are also believed to have spied on individuals connected to the 2018 poisoning of former Russian double agent Sergei Skripal.

in response to these findings,the British Foreign Office has imposed sanctions on the three identified GRU groups and 18 intelligence officers. British Foreign Secretary David Lammy stated that the GRU’s actions constitute a complete campaign aimed at destabilizing europe, undermining Ukraine’s sovereignty, and posing a threat to the security of British citizens. British authorities have a history of accusing Russia of espionage, sabotage, and assassinations on its soil, allegations that Russia consistently denies.