Latest news with #spies
The Sun
4 days ago
- Politics
- The Sun
Putin's cyber spooks who hacked Skripal's family in series of attacks are unmasked by British intel chiefs
RUSSIAN spies who led a series of attacks on Britain have been exposed by UK intelligence chiefs. Whitehall has imposed sanctions on Vladimir Putin's spooks responsible for years of hacking and other actions in the UK. 3 The measures target three GRU military intelligence units and 18 spooks — two of whom were accused of hacking the phone of defector Sergei Skripal's daughter. Ivan Yermakov and Aleksey Lukashev — both wanted by the FBI — are said to have targeted Yulia five years before Russia poisoned her and her dad with nerve agent Novichok in Salisbury in 2018. Others hit with sanctions are believed to be behind bombings and arson attacks in Britain and Europe in retaliation for support for Ukraine. They face a range of restrictions such as having financial assets frozen. Foreign Secretary David Lammy said: 'GRU spies are running a campaign to destabilise Europe, undermine Ukraine's sovereignty and threaten the safety of British citizens. "The Kremlin should be in no doubt; we see what they are trying to do in the shadows and won't tolerate it.' involved in shipping aid to Ukraine, on the orders of Russia's Wagner Group mercenaries. Spy chiefs are also probing if Russian agents were behind an incendiary device that ignited at a DHL hub in Birmingham last year. Similar incidents have been reported across Europe. 3 3
Sky News
5 days ago
- Politics
- Sky News
Unmasked: The 18 Russian spies who mounted series of attacks on UK
Dozens of Russian spies have been sanctioned by the government - including those responsible for targeting Yulia Skripal five years before her attempted murder in Salisbury. The Foreign Office has announced that three units of the Russian military intelligence agency (GRU) have been hit with sanctions, alongside 18 military intelligence officers. GRU officers attempted to murder Yulia Skipal and her father Sergei using the deadly Novichok nerve agent in Salisbury. The 18 military intelligence officers have been targeted because of a sustained campaign of malicious cyber activity over many years, including in the UK, the Foreign Office said. The government also accused the GRU of using cyber and information operations to "sow chaos, division and disorder in Ukraine and across the world". bombing of Mariupol Theatre where hundreds of civilians, including children, were murdered. Other military officers who have been sanctioned previously targeted Yulia Skripal's mobile phone with malicious malware known as X-Agent. The Skripals had moved to the UK after Sergei Skripal became a double agent, secretly working for the UK. He was tried for high treason and imprisoned in Russia - and later exchanged in a spy swap. But five years after Yulia's phone was targeted, the pair were poisoned with the nerve agent, Novichok, in Salisbury. Russia has always denied being involved in the chemical attack. Foreign Secretary David Lammy said: "GRU spies are running a campaign to destabilise Europe, undermine Ukraine's sovereignty and threaten the safety of British citizens," Foreign Secretary David Lammy said. "The Kremlin should be in no doubt: we see what they are trying to do in the shadows and we won't tolerate it." He said the UK was taking "decisive action" with the sanctions against Russian spies. "Putin's hybrid threats and aggression will never break our resolve. The UK and our allies' support for Ukraine and Europe's security is ironclad." Those sanctioned today include: Aleksandr Vladimirovich Osadchuk Yevgeniy Mikhaylovich Serbriakov Anatoliy Sergeyvich Kovalev Artem Valeryvich Ochichenko The 161st Specialist Training Centre (TsPS) (Unit 29155) of the GRU Vladislav Yevgenyevich Borovkov Nikolay Aleksandrovich Korchagin Yuriy Federovich Denisov Vitaly Aleksandrovich Shevchenko Ivan Sergeyevich Yermakov Aleksey Viktorovich Lukashev Sergey Sergeyevich Vasyuk Andrey Eduardovich Baranov Aleksey Sergeyevich Morenets Sergey Aleksandrovich Morgachev Artem Adreyevich Malyshev Yuriy Leonidovich Shikolenko Victor Borisovich Netyksho Dmitriy Aleksandrovich Mikhaylov African Initiative Artyom Sergeevich Kureyev
The Independent
5 days ago
- Politics
- The Independent
UK sanctions Russian spies who ‘targeted Britain in sustained campaign'
Britain has hit more than a dozen Russian spies with a wave of sanctions, targeting those it accused of running a 'sustained campaign' of malicious activity against the UK. The Foreign Office named 18 officers from Russian spy agency the GRU, as well as hitting three of its units with measures aimed at cracking down on Vladimir Putin's increasing aggression abroad. It said the military intelligence officers targeted were 'responsible for spreading chaos and disorder on Putin's orders', and included those who had targeted the family of former Russian spy Sergei Skripal. The officers sanctioned had targeted a device belonging to Mr Skripal's daughter Yulia with malicious malware known as X-Agent five years before GRU attempted to murder them in Salisbury with the deadly Novichok nerve agent. The units are also accused of conducting a prolonged campaign of cyberattacks across Europe, including in Britain, aimed at destabilising the continent and undermining democratic institutions. 'GRU spies are running a campaign to destabilise Europe, undermine Ukraine 's sovereignty and threaten the safety of British citizens," Foreign Secretary David Lammy said. He added: 'The Kremlin should be in no doubt: we see what they are trying to do in the shadows and we won't tolerate it. That's why we're taking decisive action with sanctions against Russian spies.' On 15 March 2022, shortly after Russia invaded Ukraine, Unit 26165 carried out online reconnaissance on civilian bomb shelters in Mariupol, southern Ukraine and in Kharkiv, eastern Ukraine, the Foreign Ministry said. One of the targets was the Mariupol theatre. Civilians sheltering inside from Russian bombs had painted the word 'children' outside in the hopes they would be spared. But the next day, the theatre was hit by Russian airstrikes, killing about 600 people, including children, according to an Associated Press investigation. In 2013, officers from the same unit had targeted the daughter of former Russian spy Sergei Skripal with malware, designed to harm or infiltrate computer systems, the foreign ministry said. In 2018, Mr Skripal and his daughter Yulia were poisoned with the nerve agent Novichok in the English city of Salisbury, in an attack the British government said was organised by Russian intelligence. The sanctions also targeted the Africa Initiative, which the Foreign Ministry said employed Russian intelligence officers to carry out information operations in Africa, including undermining public health programs and destabilising various countries. Russia's campaign of sabotage and disruption across Europe ranges from cyberattacks and propaganda to arson and attempted assassination. Mr Lammy said: 'Putin's hybrid threats and aggression will never break our resolve. The UK and our allies' support for Ukraine and Europe's security is ironclad.' More than 70 different attacks have been attributed to Russia by Western officials since the invasion. The military intelligence units sanctioned Friday also targeted foreign aid to Kyiv, ports, infrastructure and border crossings as well as technology companies, the Foreign Ministry said. Although targeting GRU officers with sanctions is likely to have limited effect, the ministry said the goal is to raise awareness of Russia's campaign and raise the cost to people working for its services, including making it harder for them to travel.
Telegraph
5 days ago
- Politics
- Telegraph
Unmasked: The Russian spies who targeted Britain on Putin's orders
Dozens of Russian spies who targeted Sergei Skripal's daughter and mounted a series of attacks on Britain have been exposed by Britain's security services. Two of the agents were accused of hacking Yulia Skripal's mobile phone five years before Russia's infamous GRU military intelligence agency poisoned the pair with deadly Novichok nerve agent on the streets of Salisbury in 2018. Others were said to be behind a string of covert bombings, arson attacks and damage to infrastructure on British and European soil in an attempt to derail support for Ukraine. On Friday, the Foreign Office announced that it was sanctioning 18 spies and three GRU units as part of crackdown on Vladimir Putin's campaign to sow chaos on the continent. British efforts to expose the shadowy operations were supported by America's FBI and intelligence services from across the Nato military alliance. Among the operatives named are Ivan Yermakov and Aleksey Lukashev, two senior members of GRU's Unit 26165 of elite hackers, accused of targeting Ms Skripal's devices before Moscow's botched attempt to murder her father. The former Russian spy and his daughter were poisoned in one of the most brazen chemical weapons attacks on British soil in March 2018. British authorities later attributed the assassination attempts, using one of the deadliest man-made chemicals, to Russia's military intelligence. Yermakov and Lukashev also feature on an FBI wanted list for their alleged roles in interfering with the 2016 presidential election eventually won by Donald Trump. Unit 26165 has also been named in investigations into alleged hacks around the French presidential elections and political interference in Germany. British officials are confident that the country's voters would not be swayed by similar Russian disinformation attempts. In 2022, their same unit was said to be responsible for conducting online reconnaissance to help position Russian strikes against the Mariupol Theatre, killing hundreds of women and children who were sheltering from Putin's invasion forces. Outside the building in the port city of Mariupol, those sheltering had written the word 'children' in giant Russian lettering. The theatre was later hit by Russian missiles, despite it obviously not being a military target. GRU units 74455, 26165, 29155 were also slapped with UK sanctions, which means businesses registered in Britain will not legally be allowed to provide them with services which could assist their sabotage campaigns. It is alleged the Russian spies are responsible for a series of hacks and attacks on European military support for Ukraine. British and European intelligence officers have found repeated examples of targeted attacks against port infrastructure, transport hubs, border control points and government infrastructure involved in aid shipments. In Britain, three men were recently found guilty for an arson attack on an East London warehouse involved in shipping humanitarian aid and Elon Musk's Starlink satellite internet systems to Ukraine. Prosecutors said the attack could be linked to Russia's Wagner Group of mercenaries. British investigators were also probing whether Russian agents had sent an incendiary device through the post after it ignited at a DHL hub in Birmingham last year. A string of similar incidents have been reported across Europe, including warehouse fires and sabotage of train lines. GRU Unit 29155 has been enlisted by Russia's top decision-makers to mount a campaign of attempted assassinations, including that of the Skripals, in recent years. In the last decade, it has been blamed for explosions at weapons depots, where products destined for Ukraine were stored, in the Czech Republic and Bulgaria. It was also behind a Russian proxy campaign to hire young Afghans to advise and fund Taliban attacks against US-led coalition forces before the American withdrawal in 2022. David Lammy, the Foreign Secretary, said: 'GRU spies are running a campaign to destabilise Europe, undermine Ukraine's sovereignty and threaten the safety of British citizens. 'The Kremlin should be in no doubt: we see what they are trying to do in the shadows and we won't tolerate it. That's why we're taking decisive action with sanctions against Russian spies. Protecting the UK from harm is fundamental to this government's Plan for Change. 'Putin's hybrid threats and aggression will never break our resolve. The UK and our Allies' support for Ukraine and Europe's security is ironclad.' Another group targeted is the 'Africa Initiative', which runs social media troll farms ultimately controlled by Vladimir Putin's spies, accused of pushing fake news and trying to scupper life-saving global health initiatives. The Russian spies on the sanctions list will be hit with travel bans and asset freezes, as well as British registered businesses barred from assisting them in any form. It is likely that many of the UK's Nato allies will follow suit in an attempt to make it more difficult for Russian intelligence operatives to operate on the continent. Osadchuk has risen through the ranks of the Russian ministry of defence to become the head of the main directorate for innovative development - a key 'cyberthinker' within the military hierarchy. A career military officer and longstanding GRU operative (Unit 26165), Osadchuk was accused by the FBI of orchestrating large-scale cyber operations targeting international entities, particularly during the 2016 US presidential election, focusing on hacking and document leaks. Serebriakov, 44, is a seasoned cyber-operator assigned to the GRU's Main Directorate (Unit 26165). Serebriakov is officially linked to the 2018 cyberattack on the Organisation for the Prohibition of Chemical Weapons (OPCW) in the Netherlands, which was disrupted by Dutch officials before hackers could breach it. According to the FBI, he specialises in covert operations abroad targeting anti-doping agencies and sporting federations, including during the 2016 Summer Olympics and Paralympics, which was held in Brazil. Serebriakov has been linked to high-profile incidents involving reconnaissance and targeted attacks, often operating under diplomatic cover, holding seven known aliases. Kovalev embodies a range of GRU tactics: cyber, biological, and covert operations. A high-profile GRU operative (Unit 26165), he is known for allegedly spearheading cyber attacks on US state and federal election systems, most notably in 2016, plus interference into critical infrastructure in Ukraine and French political organisations. He has been criminally indicted in Pennsylvania alongside six GRU officers, facing charges for conspiracy to commit computer fraud, wire fraud, and interference in critical infrastructure and democratic processes. Kovalev is also under investigation by the FBI for possible ties to Kremlin-directed nerve agent investigations. Ochichenko is a GRU operative associated with Unit 29155, involved in covert operations, including cyber espionage and sabotage. His role is thought to involve technical support or operational deployment of cyber tools used to infiltrate networks, disrupt communications, and gather intelligence. Ochichenko joined Kovalev in being charged by a federal grand US jury for targeting critical infrastructure in Ukraine and political organisations in France, as well as operations against the country of Georgia. Borovkov is a mid-ranking GRU officer implicated in cyber espionage and hacking campaigns targeting Western governments. The FBI has accused him of targeting and compromising critical infrastructure in dozens of Western nations. He is wanted by the FBI for alleged cyberattacks between December 2020 and August 2024. Unlike his colleagues, the spy agency does not know where Borovkov is located. The FBI has a $10m reward for anyone who can provide information leading to his whereabouts. Korchagin is another GRU operative within Unit 29155, involved in cyber operations targeting critical infrastructure and political entities. Like Borovkov, the FBI has accused him of criminal cyber activities between December 2020 and August 2024, and has a $10 million reward for information on his whereabouts. He is known for his role in hacking campaigns aimed at stealing sensitive data and disrupting systems, with a focus on international targets. Denisov, another GRU operative within Unit 29155, hacking campaigns targeting global infrastructure, focusing on espionage and data theft. Like Borovkov and Korchagin, is accused of criminal cyber activities by the FBI between December 2020 and August 2024, and stands accused of targeting critical infrastructure across dozens of Western nations. Denisov is wanted by the FBI with a $10 million reward for information leading to his arrest. A senior GRU officer in Unit 26165, Yermakov is known for orchestrating spear-phishing campaigns during the 2016 US presidential election. Along with Osadchuck, he was accused of stealing documents from US officials during the election before releasing them to interfere with its outcome. He was also accused of targeting anti-doping agencies during the 2016 Summer Olympics along with Serebriakov. Aliases include 'Kate S Milton', 'James McMorgans', and 'Karen W Millen', according to the FBI. Lukashev has served as a Senior Lieutenant in Russia's GRU. Like many others on this list, he has been charged in the US for his part in the conspiracy to interfere with democracy during the 2016 election, including by focusing on stealing and leaking sensitive documents. Morenets, an officer assigned to Unit 26165, is known for his involvement in the GRU's cyber activities targeting international organisations, particularly the 2018 cyberattack attempt against the OPCW in The Hague, along with Serebriakov. The FBI have also accused him of targeting anti-doping agencies across the US and globally during the Summer Olympics and Paralympics in 2016, joining charges that were filed against Yermakov and Serebriakov. Morgachev is another GRU officer and a senior member of Unit 26165, holding the rank of Lieutenant Colonel. He is accused of hacking campaigns targeting political and governmental entities during the 2016 US presidential election. Malyshev is another GRU officer and a senior Lieutenant of Unit 26165. The FBI has accused him of hacking campaigns targeting political and government entities during the 2016 US presidential election. He was also charged with aggravated identity theft, false registration of a domain name, and conspiracy to commit money laundering during this period. Malyshev is also one of seven Russian individuals to be accused of targeting anti-doping agencies during the 2016 Summer Olympics. Sergey Sergeyevich Vasyuk & Andrey Eduardovich Baranov GRU officers Vasyuk and Baranov are linked with Unit 29155, involved in cyber and covert operations. Suspected activities include hacking and espionage efforts targeting foreign infrastructure and political entities to support Russian intelligence. Vitaly Aleksandrovich Shevchenko GRU officer Shevchenko, another member of Unit 29155, was one of three Russian nationals previously sanctioned by the Council of the European Union for carrying out 'malicious cyber activities' against Estonia. Yuriy Leonidovich Shikolenko GRU operative Yuriy Leonidovich Shikolenko is a GRU operative associated with Unit 29155. His activities include hacking and espionage efforts targeting foreign infrastructure and political organisations. Victor Borisovich Netyksho GRU officer Netyksho is one of the 12 GRU officers wanted by the FBI for interference in the 2016 presidential election. The FBI had photos of 11 officers but Netyksho remained faceless until a Ukrainian 'hactivist' group intervened. The personal data and a photograph of Netyksho was published by 'Kiber Sprotyv', which translates to 'Cyber Resistance' in 2023. They managed to get hold of the information by hacking the email account of his wife, Oksana Serhiyivna Netyksho. He is thought to be a senior GRU officer and commander of Unit 26165. Dmitriy Aleksandrovich Mikhaylov GRU operative Dmitriy Aleksandrovich Mikhaylov is a GRU operative within Unit 29155, involved in cyber operations targeting global infrastructure. His activities focus on hacking and espionage, targeting political and governmental entities. Artyom Sergeevich Kureyev Chief Editor of the African Initiative Artyom Sergeevich Kureyev is a Russian individual associated with disinformation campaigns. As Chief Editor of the African Initiative, Kureyev is allegedly involved in creating and spreading false narratives to manipulate public perception. According to Bloomberg, he has had frequent contacts with around half a dozen European journalists, often arranging and covering their travel costs for some of them to visit occupied territories in Ukraine. Documents seen by the news outlet shows he appears to have paid to plant news articles. African Initiative Media and influence organisation African Initiative is a Russian media and influence organisation, masquerading as a news agency and information platform. It has sought to present itself as a Moscow-based news agency that covers events across the continent. But in reality, it is considered to be the 'main vehicle' for Russia's disinformation activities across the continent, according to a report by Vignium, a French agency which monitors foreign digital interference. The 161st Specialist Training Centre (TsPS) (Unit 29155) of the GRU This unit, known as Unit 29155 – which includes Ochichenko – is a covert Russian military intelligence facility under the GRU. It is tasked with training operatives in sabotage, assassination, and unconventional warfare. Unlike traditional cyber units, this secretive centre prepares agents for covert operations abroad, including targeted assassinations and subversion tactics. It has been linked to several high-profile incidents such as the poisoning of Sergei Skripal in the UK and the attempted assassination of defectors across Europe.
Irish Times
5 days ago
- Politics
- Irish Times
MI6 spies and SAS troops among UK nationals' details in Afghan data leak
Details of more than 100 British nationals including spies and special forces soldiers were included in one of the country's worst data breaches that led to thousands of Afghans being relocated to the UK , British media has reported. The leak by the Ministry of Defence in early 2022, which surfaced on Facebook a year later, prompted the relocation of more than 16,000 Afghans to Britain as of May this year amid concerns they would face deadly reprisals from the Taliban . Defence sources have said that details of MI6 spies, SAS and special forces personnel were included in the spreadsheet, after they had endorsed Afghans who had applied to be brought to the UK. The data set, containing the personal information of nearly 19,000 people who applied for the Afghan Relocations and Assistance Policy (Arap), was released 'in error' in February 2022 by a defence official. READ MORE The Ministry of Defence became aware of the breach more than a year later, when excerpts of the spreadsheet were anonymously posted in a Facebook group in August 2023. Other details leaked included the names and contact details of the Arap applicants and names of their family members. The personal information of more than 100 British officials, including spies from the foreign intelligence agency MI6 and special forces such as the SAS (Special Air Service), was included in the data leak, according to reports by BBC News and other outlets on Thursday. A spokesperson for the Ministry of Defence cited its long-standing policy not to comment on matters related to the special forces. Earlier this week, defence secretary John Healey issued an apology, acknowledging that the leak also included information about lawmakers and senior military figures who supported Afghan allies seeking refuge in the UK. The breach led the former Conservative government to launch a secret relocation programme, estimated to cost around £2 billion (€2.3 billion) to protect those affected. A court-imposed 'superinjunction', which banned media coverage of the leak or the relocation programme and even that there was such a veto in place, was lifted on Tuesday. – Reuters
