Profile: GRU cyber and hybrid threat operations
Factsheet detailing the background to, and specifics of, the UK's public attribution and sanctioning of Russian state actors for cyber and information operations on 18 July 2025.
Documents
Details
Cyber operations of the Main Directorate of the General Staff of the Armed Forces of the Russian Federation (GRU) have played a role in the cross-border targeting of Yulia Skripal with cyber capabilities ahead of 4 March 2018 and during Russia鈥檚 military campaign against Ukraine.
The UK is exposing 3 GRU units, 18 military intelligence officers, African Initiative and 3 of its leaders for irresponsible, destructive, and destabilising hybrid activity targeting the UK, Ukraine, and across the world. These 3 specific case studies illustrate how Russia is making sustained, persistent, and increasing use of cyber and information operations to cause significant harm.
By publicly highlighting malicious activity and imposing clear costs in response, we are sending a clear message that we know what Russia is doing, it will not be tolerated, and we will hold those responsible to account.聽聽
The UK is not acting alone.聽We are calling out Russia鈥檚 malign activity alongside NATO Allies and the EU and Member States, as well as a broad coalition of allies and partners who have issued their own national statements on the subject.聽This is the largest coalition of international support for UK cyber/hybrid action coordinated to date and a strong demonstration of global solidarity in response to Russia鈥檚 activity.
This collective announcement reaffirms our commitment to combatting the full spectrum of malign activity emanating from Putin鈥檚 Kremlin, in solidarity with our Allies and Ukraine in their fight for a just and lasting peace.