Britain and allies uncover GRU cyberattacks on organizations aiding Ukraine.

Russian military intelligence detected in cyberspace

Representatives of the UK government and their international allies have uncovered the activities of Russian military intelligence aimed at cyber operations against Western logistics organizations and technology companies.

According to the UK's National Cyber Security Centre (NCSC) and the UK Government Communications Headquarters (GCHQ), along with partners from ten countries, detailed information has been revealed about the activities of the military unit 26165 of the GRU of Russia, which has been conducting cyberattacks since 2022.

This malicious campaign by Russian military intelligence poses a serious risk to targeted organizations, including those involved in providing assistance to Ukraine. The UK and its partners are committed to raising awareness about the tactics being used. We strongly recommend that organizations familiarize themselves with the threat and mitigation advice included in the message to help protect their networks, - said NCSC Operations Director Paul Chichester.

The Russian unit was able to infiltrate the networks of victims using previously known methods such as phishing attacks and exploiting permissions of Microsoft Exchange mailboxes. They also used cameras at border crossings and near military facilities to monitor aid deliveries to Ukraine.

The UK's support for Ukraine continues, particularly through funding military assistance and introducing new sanctions against Russia. Network protection specialists are advised to take specific measures to protect networks from cyber threats.