--- title: EU sanctions Russian GRU military hackers over cyberattacks description: The EU and UK jointly sanctioned dozens of Russian individuals and entities over state-sponsored cyberattacks targeting European critical infrastructure. The... canonical: https://daily.dev/posts/eu-sanctions-russian-gru-military-hackers-over-cyberattacks-kumhuztzx twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: EU sanctions Russian GRU military hackers over cyberattacks | daily.dev og:description: The EU and UK jointly sanctioned dozens of Russian individuals and entities over state-sponsored cyberattacks targeting European critical infrastructure. The... og:url: https://daily.dev/posts/eu-sanctions-russian-gru-military-hackers-over-cyberattacks-kumhuztzx og:image: https://api.daily.dev/og/posts/KUMHuZtzX.png og:image:alt: EU sanctions Russian GRU military hackers over cyberattacks og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # EU sanctions Russian GRU military hackers over cyberattacks **[BleepingComputer](https://daily.dev/sources/bleepingcomputer)** · 3 min read · 0 upvotes · 0 comments ## Summary The EU and UK jointly sanctioned dozens of Russian individuals and entities over state-sponsored cyberattacks targeting European critical infrastructure. The EU sanctioned nine individuals and four entities including GRU officers and cybercriminals, while the UK sanctioned 24 individuals including senior GRU figures. The EU publicly identified Russia's FSB 16th Centre as controlling several cyber threat groups including Turla, which has targeted government networks across Europe since 2010. Sanctions also cover individuals tied to the Lumma Stealer malware operation and the IMPULS company accused of recruiting hackers from Russian universities. The actions follow a Sandworm-attributed wiper attack on Poland's power grid and a cyberattack on Poland's nuclear research centre. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### Which Russian hacking group did the EU identify as controlled by the FSB's 16th Centre? Turla, a long-running cyberespionage group, was publicly identified by the Council of the European Union as controlled by the FSB's 16th Centre. This unit has targeted government networks and critical infrastructure in France, Germany, Poland, Cyprus, the Netherlands, Austria, Slovakia, Romania, and Finland since 2010, running espionage campaigns against government and defense targets. _daily.dev surfaces attribution reports like this for teams tracking state-sponsored threat actors._ ### What did Russian state-backed hackers do to Poland's energy grid? A cyberattack in late December hit dozens of entities in Poland's power grid and damaged key operational technology equipment beyond repair, though it failed to disrupt power delivery. The attack was later attributed to the Russian state-backed group Sandworm, which attempted to deploy destructive DynoWiper data-wiping malware and disable compromised devices. A separate failed strike linked to Turla could have cut power to roughly 500,000 people during winter. _Infrastructure defenders follow incidents like this on daily.dev to stay ahead of grid-targeting malware._ ### Who was sanctioned by the UK for the Lumma Stealer malware operation? The UK sanctioned individuals tied to the Lumma Stealer malware operation, which British authorities linked to at least 2,100 domestic victims over a six-month period. The sanctions were part of a broader package targeting 24 individuals and entities, including senior GRU figures Vyacheslav Stafeyev, Ivan Senin, and Ivan Kasyanenko, and members of the IMPULS company accused of recruiting hackers from Russian universities. _Security teams tracking malware operations like Lumma Stealer follow enforcement actions via daily.dev._ ## Similar posts on daily.dev - [EU and UK officially blame Russian spies for cyberattack on Poland's power grid](https://daily.dev/posts/eu-and-uk-officially-blame-russian-spies-for-cyberattack-on-poland-s-power-grid-muvagan0j) · The Register · 0 upvotes · 0 comments - [Russia Pivots Its Cyberthreats Back to the U.S. and the West](https://daily.dev/posts/russia-pivots-its-cyberthreats-back-to-the-u-s-and-the-west-ld5awdhaz) · Security Boulevard · 0 upvotes · 0 comments - [Ukraine gains access to EU emergency cyber response for major attacks](https://daily.dev/posts/ukraine-gains-access-to-eu-emergency-cyber-response-for-major-attacks-atzekdmm0) · The Next Web · 1 upvotes · 0 comments - [Russian hackers breached Polish power grid thanks to bad security, report says](https://daily.dev/posts/russian-hackers-breached-polish-power-grid-thanks-to-bad-security-report-says-ot56oi0pf) · TechCrunch · 0 upvotes · 0 comments --- Tags: [#cyber](https://daily.dev/tags/cyber) [View this post on daily.dev](https://daily.dev/posts/eu-sanctions-russian-gru-military-hackers-over-cyberattacks-kumhuztzx) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"EU sanctions Russian GRU military hackers over cyberattacks","url":"https://daily.dev/posts/eu-sanctions-russian-gru-military-hackers-over-cyberattacks-kumhuztzx","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/eu-sanctions-russian-gru-military-hackers-over-cyberattacks-kumhuztzx"},"datePublished":"2026-07-13T11:22:22.185Z","dateModified":"2026-09-14T08:19:13.894Z","description":"The EU and UK jointly sanctioned dozens of Russian individuals and entities over state-sponsored cyberattacks targeting European critical infrastructure. The...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8bbd51f57ed332a2ecb0d977bb1b3f40?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8bbd51f57ed332a2ecb0d977bb1b3f40?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"BleepingComputer","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"BleepingComputer","logo":"https://media.daily.dev/image/upload/s--as8nJ3qy--/f_auto,q_auto/v1774959951/logos/bleepingcomputer?_a=BAMAMiWQ0","url":"https://daily.dev/sources/bleepingcomputer"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/eu-sanctions-russian-gru-military-hackers-over-cyberattacks-kumhuztzx","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"cyber","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"BleepingComputer","item":"https://daily.dev/sources/bleepingcomputer"},{"@type":"ListItem","position":3,"name":"EU sanctions Russian GRU military hackers over cyberattacks"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/eu-sanctions-russian-gru-military-hackers-over-cyberattacks-kumhuztzx#faq","mainEntity":[{"@type":"Question","name":"Which Russian hacking group did the EU identify as controlled by the FSB's 16th Centre?","acceptedAnswer":{"@type":"Answer","text":"Turla, a long-running cyberespionage group, was publicly identified by the Council of the European Union as controlled by the FSB's 16th Centre. This unit has targeted government networks and critical infrastructure in France, Germany, Poland, Cyprus, the Netherlands, Austria, Slovakia, Romania, and Finland since 2010, running espionage campaigns against government and defense targets. daily.dev surfaces attribution reports like this for teams tracking state-sponsored threat actors."}},{"@type":"Question","name":"What did Russian state-backed hackers do to Poland's energy grid?","acceptedAnswer":{"@type":"Answer","text":"A cyberattack in late December hit dozens of entities in Poland's power grid and damaged key operational technology equipment beyond repair, though it failed to disrupt power delivery. The attack was later attributed to the Russian state-backed group Sandworm, which attempted to deploy destructive DynoWiper data-wiping malware and disable compromised devices. A separate failed strike linked to Turla could have cut power to roughly 500,000 people during winter. Infrastructure defenders follow incidents like this on daily.dev to stay ahead of grid-targeting malware."}},{"@type":"Question","name":"Who was sanctioned by the UK for the Lumma Stealer malware operation?","acceptedAnswer":{"@type":"Answer","text":"The UK sanctioned individuals tied to the Lumma Stealer malware operation, which British authorities linked to at least 2,100 domestic victims over a six-month period. The sanctions were part of a broader package targeting 24 individuals and entities, including senior GRU figures Vyacheslav Stafeyev, Ivan Senin, and Ivan Kasyanenko, and members of the IMPULS company accused of recruiting hackers from Russian universities. Security teams tracking malware operations like Lumma Stealer follow enforcement actions via daily.dev."}}]} ```