UK and EU strike Russian cyber networks with new sanctions

Gov.uk

The United Kingdom and the European Union launched their first joint cyber sanctions package on 13 July 2026, targeting 24 Russian individuals and entities linked to malicious hybrid operations. This coordinated action attributes a failed cyber-attack against Poland’s electricity grid, which threatened power for 500,000 citizens, to the Russian Federal Security Service Centre 16.

These hostile campaigns increasingly rely on state-sponsored proxies to bypass traditional Western defense mechanisms during the ongoing war in Ukraine. Specifically, GRU Unit 29155 collaborated with the private firm IMPULS to recruit academic hackers, while the Lumma Stealer malware compromised 2,100 British victims to facilitate global espionage. Additionally, the Kremlin-funded media outlet Rybar LLC received designations for executing foreign information warfare and election interference in Moldova and Armenia. By expanding the British sanctions list to over 3,400 targets, allied governments aim to disrupt the integration of cybercriminals into formal Russian intelligence structures.

Comment

Joint Western attribution of cyber operations represents a shift towards collective deterrence in the digital domain. State-backed cyber proxies allow adversaries to maintain plausible deniability during peacetime. Sanctions alone rarely deter highly motivated intelligence services from conducting espionage. True resilience requires active cyber defence and rapid infrastructure redundancy.

To read in details click here