French report on cyberattacks stresses Russia's 'ongoing threat' to Europe's security, says Government

The report said recent espionage campaigns associated with APT28 have targeted governmental entities in European countries, including 'foreign affairs departments, political parties, foundations and associations, and entities from the sectors of defence, logistics, arms industry, aerospace and IT'.

Recent cyberattacks by Russian intelligence on French public and private services highlights the “ongoing threat posed by Russia” not only to Ukraine but to the security of Europe, the Irish government has said.

The Department of Foreign Affairs said that France has condemned “in the strongest terms” the cyberattacks. A communique issued by the French Ministry for Europe and Foreign Affairs attributed the attacks to a cyber gang known as APT28 on the direction of Russian military intelligence service (GRU).

“Since 2021, this attack group has been used to target or compromise a dozen French entities,” the statement said. “These entities are working in the daily lives of French people and include public services, private enterprises as well as a sport organisation involved in the 2024 Olympic and Paralympic Games.

"In the past, this group was also used by GRU in the sabotage of the TV5Monde broadcasting station in 2015, as well as in attempts to destabilise the French elections in 2017.” 

It said this gang also exerted “continual pressure” on Ukrainian infrastructures amid Russia’s war of aggression against Ukraine, particularly when it is operated out of GRU Unit 20728.

What's your view on this issue?

You can tell us here

“Many European partners have also been targeted by APT28 in recent years. In this regard, EU imposed sanctions on the individuals and entities responsible for the attacks conducted with the assistance of this group.” 

The statement said that France, along with its partners, was determined to use “all the means at its disposal” to anticipate Russia’s malicious behaviour in cyberspace, discourage it and respond to it where necessary.

Commenting, the Irish Department of Foreign Affairs said: “France has condemned, in the strongest terms, cyberattacks on French interests attributed to Russia’s military intelligence service (GRU) using the APT28 attack group and has stressed that such actions are contrary to the UN norms of responsible state behaviour in cyberspace.

This development highlights the ongoing threat posed by Russia, not just to Ukraine, but to the security of Europe.

The French comminque followed the publication of a report by the French national cybersecurity agency, ANSSI. The report found that the APT28 group has been used to gather “strategic intelligence” from entities in France, Europe, Ukraine and North America.

It said: “In the context of the war of aggression started by Russia against Ukraine on February 24, 2022, espionage campaigns associated with the APT28 intrusion set and targeting Ukraine, NATO countries, or EU member states have been observed.” 

It said recent espionage campaigns associated with APT28 have targeted governmental entities in European countries, including “foreign affairs departments, political parties, foundations and associations, and entities from the sectors of defence, logistics, arms industry, aerospace and IT”.

The Irish National Cyber Security Centre declined to comment, including on whether or not this group has tried to attack any Irish entities. Its parent department, the Department of Environment, Climate and Communications said the NCSC “does not comment on operation matters”.