The warning by domestic intelligence service BfV, issued in conjunction with the FBI, U.S. cybersecurity agency CISA and others, concerned Unit 29155 of Russia’s GRU.

The German agency said on the X platform that Unit 29155 had “carried out cyber attacks and other reconnaissance activities against targets in NATO and EU countries.” It issued a Joint Cybersecurity Advisory offering guidance on “tactics, techniques, and procedures” to counter what it called “malicious cyber activities targeting U.S. and global critical infrastructure.”

#FBI, #BfV_Bund and other international partners are currently warning against a cyber group of the GRU unit 29155, which has carried out cyber attacks and other reconnaissance activities against targets in NATO and EU countries. For further information ➡ https://t.co/aPrsTjzWYq https://t.co/PTA55T8AdH

— Bundesamt für Verfassungsschutz (@BfV_Bund) September 9, 2024

According to the advisory Unit 29155, also known as Cadet Blizzard or Ember Bear, was engaged in “evolving cyber tactics” aimed at “espionage, sabotage, and reputational harm” and specified the use of the ‘WhisperGate’ malware against multiple Ukrainian targets from as early as January 2022.

The GRU unit to which it belongs is known for its suspected involvement in the poisoning of former Russian double agent Sergei Skripal and his daughter Yulia in Britain in 2018, Reuters reported.

The warning comes at a time of heightened anxiety in Europe over suspected Russian hackers and spies since Moscow's invasion of Ukraine.

Earlier this year, Berlin accused Russia of a slew of cyberattacks on Germany's governing Social Democrats as well as companies in the logistics, defense, aerospace and IT sectors.