International

EU and UK hit Russian cyber networks with first joint sanctions

Britain and the European Union have imposed coordinated measures against GRU officers, cybercriminals and entities behind attacks on European infrastructure and elections. The package signals a hardening stance against Moscow's hybrid warfare.
Listen
AI-generated image: EU and UK hit Russian cyber networks with first joint sanctions
AI-generated image for illustrative purposes.
Intelligent summary
  • The UK and EU announced their first joint cyber sanctions package targeting 24 British and 13 EU Russian-linked individuals and entities.
  • Senior GRU figures including Vyacheslav Stafeyev, Ivan Senin and Ivan Kasyanenko were hit for directing cyberattacks, espionage and sabotage.
  • Measures address strikes on Polish energy infrastructure, election interference and anti-Ukraine propaganda across multiple European states.

The snow lay heavy on the Polish grid that winter. Lights flickered, then died. Families huddled in the dark while somewhere in Moscow the orders had already gone out. On 13 July the UK and EU answered in their own language: sanctions.

Twenty-four individuals and entities on the British side, nine men and four companies on the European. The first joint cyber package of its kind. Names like Vyacheslav Stafeyev, Ivan Senin and Ivan Kasyanenko now carry the weight of frozen assets and travel bans across both jurisdictions. Senior figures in Russian military intelligence, they directed the blend of hackers, criminals and self-styled hacktivists who have spent years testing the seams of European security.

I have watched these seams fray before. In dusty checkpoints and later in cooler briefing rooms the pattern repeats. A regime that cannot win openly turns to the shadow war. Infiltration. Sabotage. Espionage. Interference in elections. The patient spreading of narratives meant to peel Ukraine from the map and Europe from itself. France since 2010. German ministries. Polish power stations. Cyprus, the Netherlands, Austria, Slovakia, Romania, Finland. The list reads like a quiet admission of how far the rot has travelled.

The human cost behind the cables

Officials traced one particular strike on Poland's energy grid to Russia's FSB 16th Centre. The timing was not accidental. Winter depths. Hospitals. Homes. The Russian state, as one statement put it, sinking to new lows. Proxy groups give plausible distance until the distance collapses under scrutiny.

These sanctions strike at the core of the cybercriminal networks propping up the Russian state’s aggression. From directing criminals to targeting businesses, and striking Poland’s energy grid in the depths of winter, the Russian state is sinking to new lows in its attempts to undermine European security. Russia cannot hide behind its use of these proxy groups.

Yvette Cooper, the UK foreign secretary, said those words without flourish. They land heavier for it. The package forms part of a larger tally. Britain has now sanctioned more than 3,400 Russia-related targets. Each designation another small anchor against chaos.

The EU's high representative spoke of convergence between state and non-state actors. Of public services disrupted, critical infrastructure damaged, financial losses tallied in silence. Condemnation came first, then costs. The language of accountability in cyberspace, reference to UN norms that Russia itself long ago treated as suggestions.