The U.S. Department of State announced sanctions against two identified members of the Russian hacktivist group Cyber Army of Russia Reborn (CARR) for their roles in cyber operations targeting U.S. critical infrastructure. According to the statement, CARR has carried out malicious cyber activities since 2022 against Ukraine and governments supporting Ukraine. In late 2023, the group escalated its campaign by claiming responsibility for compromising the industrial control systems of multiple U.S. and European critical infrastructure targets. The group has since been linked to numerous malicious activities against water supply, hydroelectric, wastewater, and energy facilities in both the United States and Europe. The U.S. government characterizes Russia as providing a safe haven for such cybercriminals and enabling their operations against the United States and its allies and partners. The statement notes that although CARR’s lack of technical sophistication and effective responses by victims have so far prevented major physical damage, unauthorized access to critical infrastructure systems significantly elevates the risk of public harm and could cause severe humanitarian consequences. The current measures are framed as part of broader efforts to disrupt foreign malicious cyber activity, deter further operations, and protect U.S. and partner critical infrastructure. The Department of the Treasury is implementing the designations under Executive Order 13694, as amended, targeting the group’s leader and primary hacker, with further operational and legal details referenced in a Treasury press release.

The U.S. Department of State announced sanctions against two identified members of the Russian hacktivist group Cyber Army of Russia Reborn (CARR) for their roles in cyber operations targeting U.S. critical infrastructure. According to the statement, CARR has carried out malicious cyber activities since 2022 against Ukraine and governments supporting Ukraine. In late 2023, the group escalated its campaign by claiming responsibility for compromising the industrial control systems of multiple U.S. and European critical infrastructure targets. The group has since been linked to numerous malicious activities against water supply, hydroelectric, wastewater, and energy facilities in both the United States and Europe. The U.S. government characterizes Russia as providing a safe haven for such cybercriminals and enabling their operations against the United States and its allies and partners. The statement notes that although CARR’s lack of technical sophistication and effective responses by victims have so far prevented major physical damage, unauthorized access to critical infrastructure systems significantly elevates the risk of public harm and could cause severe humanitarian consequences. The current measures are framed as part of broader efforts to disrupt foreign malicious cyber activity, deter further operations, and protect U.S. and partner critical infrastructure. The Department of the Treasury is implementing the designations under Executive Order 13694, as amended, targeting the group’s leader and primary hacker, with further operational and legal details referenced in a Treasury press release.