France blames Russian military intelligence for years of cyberattacks on local entities

Summary: France has publicly accused the Russian military intelligence-linked hacker group APT28 of conducting cyberattacks against various French institutions since 2021, including public services and private companies. This accusation highlights escalating geopolitical tensions and France’s commitment to deterring malicious cyber activities. APT28, believed to have operated since at least 2004, has also been linked to previous high-profile cyber incidents in Europe and the U.S.

Affected: French institutions and various European entities

Keypoints :

• APT28, also known as Fancy Bear, is linked to Russia’s GRU and has targeted approximately ten French entities since 2021.
• The French foreign ministry condemned APT28 for its destabilizing actions, emphasizing violations of international cyber norms.
• The group has been active since 2004 and employs tactics like phishing, brute-force attacks, and zero-day exploits while hiding behind low-cost infrastructure.
• France is collaborating with partners to detect and respond to cyber threats linked to Russia amid heightened geopolitical tensions.
• The European Union has imposed sanctions on APT28 for its efforts to undermine critical infrastructure and democratic processes.