By Smartencyclopedia with Agencies

LONDON — The UK, alongside nine international allies, has publicly identified Russia’s GRU Unit 29155 as the group responsible for a series of high-profile cyber attacks and digital sabotage targeting governments and critical infrastructure worldwide. This marks the first time the UK has directly attributed such actions to this specific unit within Russian military intelligence.

In a press release, the UK National Cyber Security Centre (NCSC) revealed that Unit 29155 has been involved in malicious cyber operations since at least 2020. These actions have included traditional espionage as well as more aggressive cyber warfare tactics, such as deploying the Whispergate malware against Ukrainian organizations. Whispergate, designed to destroy data and disrupt systems, was used just before Russia’s 2022 invasion of Ukraine.

The newly released joint advisory, developed with international partners like the US, Germany, Canada, and Ukraine, highlights how Unit 29155’s operations have caused significant damage by stealing and leaking sensitive information. This has led to reputational harm and sabotage, the advisory says.

Paul Chichester, Director of Operations at the NCSC, said, “The exposure of Unit 29155 as a capable cyber actor illustrates the importance that Russian military intelligence places on using cyberspace to pursue its illegal war in Ukraine and other state priorities.” He urged organizations to heed the advisory’s guidance to strengthen their cyber defenses.

This disclosure also provides new details on Unit 29155’s methods and contrasts its actions with those of other GRU-linked groups, such as Fancy Bear (Unit 26165) and Sandworm (Unit 74455), both known for cyber espionage and attacks. While Fancy Bear and Sandworm focus on specific intelligence-gathering and sabotage, Unit 29155 has engaged in broader offensive cyber operations, sometimes relying on cybercriminals and non-GRU actors to carry out parts of its campaigns.

While the UK and its allies had previously attributed the use of Whispergate to Russian military intelligence, this latest advisory identifies Unit 29155 as the specific group behind these operations.

The exposure of Unit 29155 and its activities highlights the growing importance of cybersecurity in global military strategies, especially as nations like Russia increasingly turn to digital warfare to achieve their objectives. The UK and its allies are calling for a united response to mitigate these ongoing threats.