Version française: 🇫🇷
Members of the Cyber Crisis Coordination Centre (C4) have observed the targeting and compromise of French entities using the Turla intrusion set operated by the 16th Centre of the Federal Security Service of the Russian Federation (FSB). Since at least 2004, this intrusion set has been implemented for intelligence-gathering purposes against strategic entities and individuals worldwide, including in France. The French intermediate and final victimology of the Turla intrusion set notably includes ministries, entities in the diplomatic, defence, justice, and technology sectors. Espionage campaigns associated with the Turla intrusion set against Ukraine, NATO countries, and EU member states continue in the context of Russia’s war of aggression launched on February 24, 2022. The malicious cyber activities of the 16th Centre of the FSB against France and its European partners are the subject today (13 July 2026) of two formal attribution statements by the French Minister for Europe and Foreign Affairs, on behalf of France, and by the High Representative of the EU for Foreign Affairs and Security Policy, on behalf of the EU and its Member States. Link to the Ministry for Europe and Foreign Affairs statement : https://www.diplomatie.gouv.fr/fr/presse-et-ressources/decouvrir-et-informer/actualites/attribution-a-la-russie-d-activites-cyber-malveillantes-a-des-fins-d-espionnage-en-france
Download the report : Targeting and Compromise of French Entities Using the Turla Intrusion Set
