Friday

27th May 2022

First use of new EU sanctions against Russia, China hackers

  • Ghostwriter campaign was 'aligned' with Russian interests, Mandiant Solutions said (Photo: ec.europa.eu)

The EU has imposed new-model sanctions on Russian and Chinese cybercriminals, but fresh revelations of Russia-linked media-hacking indicate it might need to go further.

The EU asset-freezes and visa bans, imposed Thursday (30 July), targeted four officers from Russia's military intelligence service, the General Staff of the Armed Forces of the Russian Federation (GRU), as well as the GRU's Moscow-based tech branch, the Main Centre for Special Technologies (GTST).

Read and decide

Join EUobserver today

Become an expert on Europe

Get instant access to all articles — and 20 years of archives. 14-day free trial.

... or subscribe as a group

  • 'Such behaviour ... undermines international security and stability,' EU foreign affairs chief Josep Borrell said (Photo: European Union)

The EU named the four men and published their passport numbers and places of birth, saying they were guilty of trying to hack an international institute, the Organisation for the Prohibition of Chemical Weapons, in The Hague, in 2018.

It said the GTST attacked several EU companies with "ransomware" in 2017 "blocking access to data [and] resulting ... in significant economic loss".

It also said the GRU offshoot tried to take down Ukraine's electricity grid in the winter of 2015/2016.

The EU blacklists were the first time Europe used new legal measures, created last year, which target individuals and entities, instead of states, on cybercrime.

The EU has also created quick-fire sanctions to target individuals guilty of using chemical weapons and is working on similar measures, due in autumn, to target human rights abusers worldwide.

Thursday's measures also named two Chinese men and a Chinese company, Haitai Technology Development, who, the EU said, tried to steal commercially-sensitive secrets from Western multinational firms.

And they named a North Korean company, Chosun Expo, for attacks on Polish financial sector regulator, the Polish Financial Supervision Authority, as well as US firm Sony Pictures, and banks in Asia and the US.

"Such behaviour is unacceptable as it undermines international security and stability," EU foreign affairs chief Josep Borrell said.

Russia and North Korea did not immediately comment.

But the Chinese EU embassy in Brussels said it was "a staunch defender of network security and one of the biggest victims of hacker attacks", in a statement to the Reuters news agency.

Cyberspace should be kept safe via "dialogue and cooperation", instead of sanctions, it added.

The EU's counter-GRU sanctions came the same day a California-based internet security firm, Mandiant Solutions, also pointed at Moscow for hacking news websites in Europe.

The firm had "moderate confidence", it said, that 14 anti-Nato disinformation attacks between March 2017 and May this year came out of Russia.

The incidents were "part of a larger, concerted, and ongoing influence campaign" which was "aligned with Russian security interests", it said.

'Ghostwriter'

It called the campaign "Ghostwriter" because the hackers broke into news websites in the Baltic countries and Poland to insert fake stories on their webpages.

In one example, in September last year, Ghostwriter hacked Lithuanian website kaunas.kasvyksta.lt and inserted a fake article saying German Nato troops in the country had desecrated a Jewish cemetery.

It also created photoshopped images of the cemetery as purported evidence accompanying the article.

In a second example, in May this year, it compromised seven Polish regional news websites with fake quotes from a US general ridiculing Polish armed forces.

Ghostwriter also published bogus content that Nato soldiers were spreading coronavirus in the region, raping people, and running over children in armoured cars

And it used fake online personas to send links to the fake stories to other media.

Borrell's diplomatic service has a special cell for debunking Russian propaganda.

But the EU has no counter-propaganda sanctions on the cybercrime, chemical weapons, or human rights model.

"Ghostwriter is already targeting the West, but the methods associated with it will be seen more and more in Europe and the US as a means to alter perception there," Mandiant Solutions tech expert John Hultquist said in a statement.

"The method of hacking media sites to push fabricated narratives is a powerful one," he added.

Opinion

When Reagan met Gorbachev — a history lesson for Putin

Neither Reagan nor Gorbachev achieved their goal at the famous Reykjavik summit of 1986. Despite that fact there are lessons that current leaders — particularly Vladimir Putin — could adopt from these two iconic leaders.

Opinion

Orbán's overtures to Moscow are distasteful and detrimental

Some Western European politicians are reviving the chimera of a negotiated settlement. None of this makes the current, half-hearted approach towards sanctioning Russia look better — nor does it shed any favourable light on the cravenness of Hungary's current government.

News in Brief

  1. Dutch journalists sue EU over banned Russia TV channels
  2. EU holding €23bn of Russian bank reserves
  3. Russia speeds up passport process in occupied Ukraine
  4. Palestinian civil society denounce Metsola's Israel visit
  5. Johnson refuses to resign after Downing Street parties report
  6. EU border police has over 2,000 agents deployed
  7. Dutch tax authorities to admit to institutional racism
  8. Rutte calls for EU pension and labour reforms

Stakeholders' Highlights

  1. Nordic Council of MinistersNordic delegation visits Nordic Bridges in Canada
  2. Nordic Council of MinistersClear to proceed - green shipping corridors in the Nordic Region
  3. Nordic Council of MinistersNordic ministers agree on international climate commitments
  4. UNESDA - SOFT DRINKS EUROPEEfficient waste collection schemes, closed-loop recycling and access to recycled content are crucial to transition to a circular economy in Europe
  5. UiPathNo digital future for the EU without Intelligent Automation? Online briefing Link

Latest News

  1. EU summit will be 'unwavering' on arms for Ukraine
  2. Orbán's new state of emergency under fire
  3. EU parliament prevaricates on barring Russian lobbyists
  4. Ukraine lawyer enlists EU watchdog against Russian oil
  5. Right of Reply: Hungarian government
  6. When Reagan met Gorbachev — a history lesson for Putin
  7. Orbán oil veto to deface EU summit on Ukraine
  8. France aims for EU minimum-tax deal in June

Join EUobserver

Support quality EU news

Join us