The UK and allies expose reckless GRU cyber attacks globally targeting political, business, media, and sport sectors, violating international law and causing significant harm.

Cyber & Information WarfareCyber AttacksHacking, malware, ransomware

Aggressor

Summary

The UK National Cyber Security Centre (NCSC) exposed a campaign by the GRU, the Russian military intelligence service, involving indiscriminate and reckless cyber attacks targeting political institutions, businesses, media, and sport globally. The GRU's cyber operations have violated international law and caused economic damage across multiple countries including Russia. Key targets include international sports body WADA, transport systems in Ukraine, democracies, and various businesses. The UK government, backed by its allies, condemned these actions and committed to exposing and responding to such cyber threats to international stability.

Classification

Confidence: High

Direct attribution by the UK National Cyber Security Centre and UK government officials to the GRU for conducting widespread cyber attacks violating international law, targeting multiple sectors and countries, demonstrating hostile hostile hybrid warfare activity.

Source URL

https://www.gchq.gov.uk/news/reckless-campaign-of-cyber-attacks-by-russian-military-intelligence-service-exposed

Open source

Provenance

Publisher: extension
Submitted: Jun 11, 2026, 17:25 UTC
Last updated: Nov 4, 2026, 08:35 UTC
Event time: Sep 1, 2018, 00:00 UTC

Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.

Raw record

{
  "id": "42bc39b6-7462-4618-9248-1c08c8467a8c",
  "url": "https://www.gchq.gov.uk/news/reckless-campaign-of-cyber-attacks-by-russian-military-intelligence-service-exposed",
  "source": "extension",
  "status": "approved",
  "category": "Cyber & Information Warfare",
  "subcategory": "Cyber Attacks",
  "incident_type": "Hacking, malware, ransomware",
  "country": "Russian Federation",
  "source_reliability": "B",
  "info_credibility": "3",
  "tags": [
    "GRU",
    "Russian military intelligence",
    "cyber attacks",
    "cyber security",
    "international law violation",
    "WADA",
    "Ukraine transport disruption",
    "democracy destabilization"
  ],
  "nodes": [],
  "countries": [
    "Russian Federation"
  ],
  "where_text": "Cyberspace",
  "headline": null,
  "description": "The UK National Cyber Security Centre (NCSC) exposed a campaign by the GRU, the Russian military intelligence service, involving indiscriminate and reckless cyber attacks targeting political institutions, businesses, media, and sport globally. The GRU's cyber operations have violated international law and caused economic damage across multiple countries including Russia. Key targets include international sports body WADA, transport systems in Ukraine, democracies, and various businesses. The UK government, backed by its allies, condemned these actions and committed to exposing and responding to such cyber threats to international stability.",
  "summary_short": "The UK and allies expose reckless GRU cyber attacks globally targeting political, business, media, and sport sectors, violating international law and causing significant harm.",
  "summary_extended": null,
  "actor_primary": "GRU",
  "target_primary": null,
  "location_text": "Russian Federation",
  "location_region": null,
  "location_coordinates_lat": 61.524,
  "location_coordinates_lon": 105.3188,
  "location_precision": "Regional",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "Direct attribution by the UK National Cyber Security Centre and UK government officials to the GRU for conducting widespread cyber attacks violating international law, targeting multiple sectors and countries, demonstrating hostile hostile hybrid warfare activity.",
  "event_time_utc": "2018-09-01T00:00:00.000Z",
  "end_time_utc": "2018-10-05T00:00:00.000Z",
  "event_time_confidence": "pm24h",
  "created_at": "2026-06-11T17:25:00.233Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "regional",
  "time_precision_band": "within_24h",
  "severity_band": "significant",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

Public assessmentReliability: StrongSeverity: SignificantAttribution: HighSingle sourceTime: Same dayLocation: Regional

Source reliability

Info credibility

Event time

Sep 1, 2018, 00:00 UTC

End time

Oct 5, 2018, 00:00 UTC

Event time confidence

pm24h

Location

Russian Federation

Primary actor

GRU

Country

Russian Federation

Countries

Russian Federation

Tags

GRU, Russian military intelligence, cyber attacks, cyber security, international law violation, WADA, Ukraine transport disruption, democracy destabilization

Loading signal...

{ "id": "42bc39b6-7462-4618-9248-1c08c8467a8c", "url": "https://www.gchq.gov.uk/news/reckless-campaign-of-cyber-attacks-by-russian-military-intelligence-service-exposed", "source": "extension", "status": "approved", "category": "Cyber & Information Warfare", "subcategory": "Cyber Attacks", "incident_type": "Hacking, malware, ransomware", "country": "Russian Federation", "source_reliability": "B", "info_credibility": "3", "tags": [ "GRU", "Russian military intelligence", "cyber attacks", "cyber security", "international law violation", "WADA", "Ukraine transport disruption", "democracy destabilization" ], "nodes": [], "countries": [ "Russian Federation" ], "where_text": "Cyberspace", "headline": null, "description": "The UK National Cyber Security Centre (NCSC) exposed a campaign by the GRU, the Russian military intelligence service, involving indiscriminate and reckless cyber attacks targeting political institutions, businesses, media, and sport globally. The GRU's cyber operations have violated international law and caused economic damage across multiple countries including Russia. Key targets include international sports body WADA, transport systems in Ukraine, democracies, and various businesses. The UK government, backed by its allies, condemned these actions and committed to exposing and responding to such cyber threats to international stability.", "summary_short": "The UK and allies expose reckless GRU cyber attacks globally targeting political, business, media, and sport sectors, violating international law and causing significant harm.", "summary_extended": null, "actor_primary": "GRU", "target_primary": null, "location_text": "Russian Federation", "location_region": null, "location_coordinates_lat": 61.524, "location_coordinates_lon": 105.3188, "location_precision": "Regional", "is_aggressor_signal": true, "signal_type": "HYBRID_SIGNAL", "is_hybrid_war_signal": true, "classification_complete": true, "hybrid_signal_complete": true, "classification_confidence": "High", "classification_rationale": "Direct attribution by the UK National Cyber Security Centre and UK government officials to the GRU for conducting widespread cyber attacks violating international law, targeting multiple sectors and countries, demonstrating hostile hostile hybrid warfare activity.", "event_time_utc": "2018-09-01T00:00:00.000Z", "end_time_utc": "2018-10-05T00:00:00.000Z", "event_time_confidence": "pm24h", "created_at": "2026-06-11T17:25:00.233Z", "updated_at": "2026-11-04T08:35:32.139Z", "reliability_band": "strong", "location_precision_band": "regional", "time_precision_band": "within_24h", "severity_band": "significant", "attribution_confidence_band": "high", "attribution_basis": "single_source" }