UK and Allies Expose Russian Cyber Attacks on Aid Routes

On May 21, 2025, the UK, along with the United States, France, and Germany, issued a joint advisory exposing a Russian cyber campaign targeting organizations that support Ukraine. The campaign, reportedly carried out by Russia’s military intelligence service, the GRU, aims to disrupt and monitor the delivery of aid to Ukraine. The advisory highlights the significant cybersecurity risks faced by these organizations and urges them to strengthen their defenses to prevent potential cyberattacks.

The cyberattacks have been linked to the GRU’s Unit 26165, also known as Fancy Bear or APT28, which has been involved in cyber-espionage operations since 2022. The unit has reportedly breached thousands of poorly secured internet-connected cameras located at border crossings, rail stations, and logistics hubs in Europe and the U.S. By monitoring transport routes and obtaining cargo schedules, these attacks aim to gather sensitive information related to military aid flowing into Ukraine.

The joint advisory stresses the importance of enhancing cybersecurity measures, such as improved monitoring, multi-factor authentication, and regular security updates. In response to the growing threat, the UK government has also imposed 100 new sanctions on Russia, targeting its military and information warfare capabilities. This move underscores the seriousness of the cyber threat and the commitment to countering Russia’s aggressive tactics in cyberspace.