Overview
- Germany’s foreign ministry publicly attributed an August 2024 cyber-attack to the GRU, with officials linking the operation to the APT28 “Fancy Bear” group.
- The attack targeted Deutsche Flugsicherung and other sensitive networks, with authorities assessing whether intrusions probed vulnerabilities in air-safety systems.
- Officials said a coordinated influence effort dubbed Storm 1516 sought to destabilize the February 23, 2025 federal election through fabricated content and deepfakes.
- Berlin is working with NATO and European partners to evaluate the scope of the operation and coordinate potential responses.
- Germany condemned state-controlled Russian actors, summoned the Russian ambassador, and signaled possible further diplomatic steps and strengthened cyber defenses.