Russian intelligence officers have been accused of conducting a cyber-espionage campaign against the United Kingdom and the United States, according to multiple reports. The campaign, which has been ongoing since 2015, is said to have targeted politicians, civil servants, journalists, universities, think tanks, and non-government organizations in an attempt to undermine democracy and influence politics.
The hacking group responsible, known as Star Blizzard, is believed to be part of Russia's Federal Security Service (FSB), the successor to the Soviet-era KGB. The FSB is accused of using elite hacking teams to surveil Russian citizens, interfere in foreign politics, and infiltrate US critical infrastructure.
The hackers, identified as Ruslan Aleksandrovich Peretyatko and Andrey Stanislavovich Korinets, are alleged to have compromised the computers of employees at multiple US government agencies between October 2016 and October 2022. They also reportedly compromised the email accounts of American national security officials through spear-phishing campaigns.
In the UK, the campaign included the leak of U.K.-U.S. trade documents and the hacking of think tanks defending democracy against disinformation. A Russian group was also revealed to be behind the 2018 hack on the Institute for Statecraft, resulting in two individuals being designated under the cyber sanctions regime.
In response to these activities, the US Justice Department has announced charges against the Russian intelligence officer and an IT worker, and the US Treasury Department has imposed sanctions on the individuals. The U.K. and its international allies have also issued a cyber security advisory to share technical details about the cyberattacks and how to defend against them.