Overview
- France announced on Monday that it will convene the Russian ambassador and impose sanctions on nine individuals and four entities over a coordinated cyber campaign that targeted about a dozen European countries.
- Paris publicly attributed the operations to the FSB, specifically citing the long-running Turla modus operandi and the FSB unit 61240 as responsible for intrusions into ministries, defence-related networks and private firms.
- The EU and the United Kingdom issued parallel sanction packages covering overlapping Russian-linked actors, signaling a coordinated Western diplomatic and financial response.
- French officials said the campaign sought both espionage and sabotage, pointing to attempts to disrupt critical systems including a reported effort against Polish rail infrastructure, and said national agencies Viginum and ANSSI have strengthened detection and response.
- Authorities framed the July action in a longer pattern of activity that dates back to Turla compromises from 2017 and a February 2025 FSB-linked exfiltration from a defence research institute, underscoring that officials view the incidents as sustained state-directed operations rather than isolated criminal hacks.