Back www.gov.uk

Profile Gru Cyber And Hybrid Threat Operations

www.gov.uk • August 25, 2026

This document illustrates how the Main Directorate of the General Staff of the Armed Forces of the Russian Federation (GRU) is making sustained and persistent use of cyber and information operations to cause real world harm to the UK and its allies and in support of Russia’s illegal war in Ukraine.

The UK is not acting alone. We will continue to work with our allies and partners (including through NATO and the EU and its Member States) to combat the full spectrum of malign hybrid activity emanating from Putin’s Kremlin in solidarity with Ukraine in their fight for a just and lasting peace.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

GRU Cyber Operations Targeting Ukraine and NATO Allies The UK government has published a report detailing the cyber and hybrid threat operations of the Russian GRU, specifically focusing on Unit 29155. This unit has been linked to various cyber-attacks against Ukraine, NATO, and other entities, employing tactics such as wiper malware like 'Whispergate'. The report highlights that Unit 29155's cyber division is composed of young recruits under experienced handlers, known for their disruptive operations. Notable incidents include the targeting of over 70 Ukrainian government systems prior to the invasion of Ukraine. The UK is collaborating with allies to counter these threats and support Ukraine in its ongoing conflict against Russia. The report indicates a persistent and coordinated effort by the GRU to use cyber capabilities as part of a broader hybrid warfare strategy. 76

Profile Gru Cyber And Hybrid Threat Operations

The full story

Extracted Entities

APT Groups (1)

Countries (2)