France Calls Out Russian Military Intelligence Over Alleged Cyberattacks

France has officially accused Russia’s APT28 hacking group of orchestrating cyberattacks on key national systems and events.

Quick Takes

APT28 allegedly targeted French elections and the 2024 Paris Olympics.
This is the first formal public attribution of a cyberattack by France to a foreign government.
The geopolitical climate is tense due to Russia’s activities in Ukraine.
France expressed its intention to use all resources to counteract and deter future cyber threats.

APT28’s Alleged Threat

France has accused Russia of sponsoring repeated cyberattacks over several years, focusing on key national events like elections and the 2024 Paris Olympics. The suspects are connected to Russia’s military intelligence agency, known as APT28 or Fancy Bear. This group has faced many allegations of cyber interference, including in the 2016 US elections.

These cyberattacks mark the first time France has publicly attributed such actions to a foreign government. Incidents like the “Macron-leaks” during the 2017 elections and a simulated Islamic State takeover of a French TV station in 2015 are notable examples of what France alleges is APT28’s handiwork.

France’s Condemnation

Since 2021, the GRU has allegedly intensified cyberattacks on French and EU targets, including sectors like government, finance, and aerospace.”France condemns in the strongest terms the use by Russia’s military intelligence service (GRU) of the APT28 attack group, at the origin of several cyberattacks on French interests,” the foreign ministry stated.

The diplomatic tensions rise, exacerbated by Russia’s Ukraine invasion. France has signaled intentions to “anticipate Russia’s malicious behaviour in cyberspace, discourage it and respond to it where necessary.” In cooperation with Poland, France plans to sign a “friendship treaty” to counteract misinformation and election tampering.

France accuses Russian military intelligence of being behind a series of cyberattacks against the country over the last decadehttps://t.co/Affyp9jsLD

— The Defense Post (@DefensePost) April 30, 2025

Global Cybersecurity Concerns

APT28 has been linked globally to meddlesome cyber pursuits, including the 2016 US election entanglements. The alleged theft and dissemination of thousands of internal campaign emails from Macron’s team were intended to sway public favor, but ultimately had no significant electoral impact.

The allegations against APT28 underscore the importance of reinforced cybersecurity measures and international cooperation among NATO members and other allies, pushing for a higher standard of vigilance and readiness against such forms of interference.