France Attributes Cyber Espionage to Russian FSB's Turla Group

France Attributes Cyber Espionage to Russian FSB's Turla Group

First seen 13 Jul 2026, 21:56 UTC Alleyesonwagnerwww.crowdstrike.comwww.bitdefender.comGbhackersCybersecuritynews 84% similarity 74.1

Article Content

Browse articles
ThreatCluster

On July 13, 2026, France officially attributed a series of cyber intrusions targeting its government and defense sectors to the Turla intrusion set, linked to Russia's FSB 16th Center. The attacks, ongoing since the 2010s, have compromised the French Ministry of Defense and Foreign Affairs, among other entities. The Turla group is known for exploiting advanced techniques and has been active since 2008, focusing on espionage against various state and diplomatic targets. French authorities revealed that multiple military units are involved in these operations, with specific units designated for targeting France. The FSB's 16th Center, a key SIGINT organization, has been responsible for these sustained cyber campaigns, which have intensified since the onset of the Ukraine conflict. The attribution highlights the ongoing threat posed by state-sponsored cyber activities in Europe.

Key Points: • France attributes long-term cyber espionage to Russia's FSB 16th Center. • Turla has targeted French ministries and defense entities since the 2010s. • The FSB's 16th Center is responsible for advanced cyber operations against Europe.

ThreatCluster AI

Timeline

2026-07-13
France attributes cyber attacks to FSB's Turla group
French authorities publicly linked ongoing cyber espionage campaigns to the Turla intrusion set associated with Russia's FSB 16th Center.
Alleyesonwagner
2026-07-13
Turla's cyber activities confirmed to affect French ministries
The cyber espionage campaign has impacted various French government and defense organizations since the 2010s.
Gbhackers
2026-07-13
Investigation reveals SharePoint exploit by Turla
Investigators detailed how Turla hackers exploited a SharePoint vulnerability to access sensitive French user accounts.
Cybersecuritynews

Community

Browse all →