Europe is no longer treating Turla and Centre 16 as an attribution problem. The move is to make the people, companies, and proxies behind those campaigns harder to use, fund, and protect across borders.
The EU and UK jointly sanctioned Russian intelligence-linked operatives and entities tied to years of espionage and destructive attacks across Europe. The package points to activity since 2010 in countries including France, Germany, Poland, Cyprus, the Netherlands, Austria, Slovakia, Romania, and Finland, and ties the same network to attacks on critical infrastructure such as heating and power plants.
For teams that track Russian state-linked activity in energy, government, defense, finance, and healthcare, the change is in the operational frame. The pressure is now on the command-and-proxy layer that enables access, not on a patchable system, and that can alter how those actors move, resupply, and persist.
Weak Security Continues to Fuel Russian Cyberattacks
In a first, the UK and the EU jointly imposed sanctions on Russian individuals and entities for cyberattacks and disinformation campaigns in the region.
Europe strikes out against Russia’s Turla over espionage, ‘destructive attacks’
The EU and UK have imposed coordinated sanctions targeting Russian cyberespionage networks, including the FSB and GRU, following destructive infrastructure attacks.