The United States has strongly condemned the malicious cyber activities carried out by Russia's General Staff Main Intelligence Directorate (GRU) against several European countries. In a statement, the U.S. expressed its condemnation of the cyber attacks targeting Germany, Czechia, Lithuania, Poland, Slovakia, and Sweden, attributing the actions to APT28, also known as Fancy Bear, Strontium, and Forest Blizzard.
Describing APT28 as a well-known threat actor with a history of engaging in nefarious behavior, the United States highlighted previous indictments and sanctions against actors associated with APT28 for various cyber activities, including interference in the 2016 U.S. presidential elections and hack-and-leak operations targeting organizations like the World Anti-Doping Agency.
The U.S. Department of Justice collaborated with Germany to address the cyber threat posed by APT28, particularly in remedying a network of compromised routers used by the group to carry out malicious activities. This joint effort aimed to block the GRU from regaining access to the affected devices and prevent further cyber intrusions.
Furthermore, the United States criticized Russia's behavior for disregarding the Framework for Responsible State Behavior in Cyberspace, a standard supported by all United Nations Member States. The U.S. reaffirmed its commitment to the security of its allies and partners, emphasizing the importance of upholding international norms in cyberspace.
Calling on Russia to cease its malicious activities and adhere to its international commitments, the United States pledged to work closely with the European Union and NATO Allies to disrupt Russian cyber operations, safeguard citizens and foreign partners, and hold malicious actors accountable for their actions.