Germany’s domestic intelligence agency, the Bundesverfassungsschutz, has recently released a note on the Russian cyber group UNC2589 affiliated with the GRU Unit 29155 in connection with recent cyber operations targeting NATO and EU nations.
This alert, which coordinates with those of its foreign counterparts, notes that Russia continues probing Western targets for vulnerabilities even as the continent is facing a possible renewed aggression.
An online threat intelligence has been issued by the German domestic intelligence agency over a cyber group associated with the Russian military intelligence GRU, Unit 29155, which has launched cyberattacks on NATO and EU states.
The Bundesverfassungsschutz, Germany’s domestic intelligence agency, released the warning in a post on social media platform X on Monday and designated the threat alongside the FBI and other partners, including the U.S. cybersecurity agency CISA, the NSA, and further international partners it did not name.
The warning is being made at a time when Europe has increasingly been concerned about supposed Russian hackers and spies since Russia invaded Ukraine in 2022.
This year in March, Berlin alleged that Russia has conducted numerous cyber attacks on Germany’s ruling Social Democrats party and multinational logistics, defense, aerospace, and IT businesses.
The intelligence agency warned that the group, also referred to as Cadet Blizzard or Ember Bear, takes part in activities for the purposes of espionage and sabotage, and many of their actions include defacing websites and leaking documents.
The specific GRU unit it appears to be connected to is accused of Syria’s nerve gas attack on former Russian double agent Skripal and his daughter in Britain last year, the agency said.
