Germany’s domestic intelligence agency, the Bundesverfassungsschutz, has issued a strong warning against a cyber group linked to Russia’s military intelligence agency, the GRU. The group, known as UNC2589, has been accused of carrying out cyberattacks targeting NATO and EU countries. This warning was issued jointly with the FBI, the U.S. Cybersecurity and Infrastructure Security Agency (CISA), the NSA, and other international partners.
The warning comes amidst heightened concern in Europe regarding Russian hacking and espionage activities following the invasion of Ukraine in 2022. Earlier this year, Germany accused Russia of launching a series of cyberattacks against the country’s governing Social Democrats, as well as companies in critical sectors like logistics, defense, aerospace, and IT.
The intelligence agency, in its warning, described UNC2589, also known as Cadet Blizzard or Ember Bear, as a group that engages in espionage and sabotage. They are alleged to be involved in activities like defacing websites and publishing stolen data. The GRU unit to which UNC2589 belongs is notorious for its suspected involvement in the 2018 poisoning of former Russian double agent Sergei Skripal and his daughter Yulia in Britain.
