EU and UK Sanction Russia’s Cyber Ecosystem
Latest Joint Cyber Sanctions Package
On July 13, 2026, the EU and UK announced their first joint cyber sanctions package against Russia, targeting not individual hacking groups but an entire "ecosystem" of spies, criminals, hacktivists, and front companies.
Key Takeaways:
- EU vs. UK Sanctions: The EU listed nine individuals and four entities, while the UK imposed 24 sanctions.
- Turla Group Attributed: Both attributed recent attacks on Poland’s energy grid to FSB Centre 16, linking it to the persistent Turla espionage group.
- Shifting Focus: Europe is moving away from distinguishing between Russian state hackers and criminals, treating them as parts of a single ecosystem.
- Front Company Sanction: A notable target is OOO IMPULS, accused of recruiting hackers for GRU’s Unit 29155 from Russian universities.
- Sanctioning Managers: Along with operators, the sanctions also target three GRU leadership figures: Vyacheslav Stafeyev, Ivan Senin, and Ivan Kasyanenko.
Context:
The EU and UK actions signal a significant shift in how they perceive and respond to cyber threats from Russia. By sanctioning an entire ecosystem, they’re sending a strong message about the interconnectedness of these activities and their impact on global security.