bleeping-computer Jul 13, 2026 · Crawled Jul 13, 2026

EU sanctions Russian GRU military hackers over cyberattacks

2 Actors 2 Malware

AI Summary

The European Union and the United Kingdom have jointly imposed sanctions on Russian individuals and entities linked to state-sponsored cyberattacks. The targeted groups include GRU officers, FSB-affiliated hackers such as the Turla group, and cybercriminals involved in operations like the Lumma Stealer malware. These actors are accused of conducting cyberespionage, targeting critical infrastructure across Europe, and supporting disinformation campaigns. The sanctions follow a series of attacks on energy grids and government institutions, including failed attempts to disrupt Poland's power infrastructure.

AI-extracted · verify before operational use

Extracted Entities 4 found

Threat Actor Turla → Threat Actor Sandworm → Malware Lumma Stealer → Malware DynoWiper →

MITRE ATT&CK TTPs 30 techniques

T1012 Query Registry · Discovery T1036.005 Match Legitimate Name or Location · Defense Evasion T1057 Process Discovery · Discovery T1059.001 PowerShell · Execution T1071.001 Web Protocols · Command And Control T1082 System Information Discovery · Discovery T1083 File and Directory Discovery · Discovery T1102 Web Service · Command And Control T1140 Deobfuscate/Decode Files or Information · Defense Evasion T1480.001 Environmental Keying · Defense Evasion T1573.001 Symmetric Cryptography · Command And Control T1574.002 DLL Side-Loading · Persistence T1583.001 Domains · Resource Development T1583.004 Server · Resource Development T1583.007 Serverless · Resource Development T1584.003 Virtual Private Server · Resource Development T1608 Stage Capabilities · Resource Development T1048.003 Exfiltration Over Unencrypted Non-C2 Protocol · Exfiltration T1053.005 Scheduled Task · Execution T1059.003 Windows Command Shell · Execution T1069.002 Domain Groups · Discovery T1070.001 Clear Windows Event Logs · Defense Evasion T1078.004 Cloud Accounts · Defense Evasion T1087.002 Domain Account · Discovery T1090 Proxy · Command And Control T1129 Shared Modules · Execution T1136.002 Domain Account · Persistence T1204.002 Malicious File · Execution T1217 Browser Information Discovery · Discovery T1566 Phishing · Initial Access