Europe is no longer treating Turla and Centre 16 as an attribution problem. The move is to make the people, companies, and proxies behind those campaigns harder to use, fund, and protect across borders.
The EU and UK jointly sanctioned Russian intelligence-linked operatives and entities tied to years of espionage and destructive attacks across Europe. The package points to activity since 2010 in countries including France, Germany, Poland, Cyprus, the Netherlands, Austria, Slovakia, Romania, and Finland, and ties the same network to attacks on critical infrastructure such as heating and power plants.
For teams that track Russian state-linked activity in energy, government, defense, finance, and healthcare, the change is in the operational frame. The pressure is now on the command-and-proxy layer that enables access, not on a patchable system, and that can alter how those actors move, resupply, and persist.