Zürcher Nachrichten - France accuses Russian military intelligence over cyberattacks

French Foreign Minister Jean-Noel Barrot took the accusations to the UN Security Council, demanding that Russia, whose envoy was in the chamber, immediately halt the attacks.

Barrot said Russia used a branch of the GRU military intelligence known as the "APT28 attack group". Also known as Fancy Bear, the branch has been linked to global attacks including in the 2016 US election, when emails of Democratic candidate Hillary Clinton were leaked.

France's foreign ministry said that since 2021, APT28 had targeted a dozen French entities in the "defence, financial and economic sectors".

Barrot linked the renewed APT28 attacks to France's support for Ukraine since the start of Russia's invasion in February 2022.

"They targeted a dozen French entities -- public services, enterprises, sporting organisations linked to the Olympic Games and Paralympics," he told a Security Council debate on Ukraine. France and Russia are two of the council's five permanent members.

"We condemn these cyberattacks in the strongest manner," he added.

"They are unworthy of a permanent member of the Security Council and against frameworks fixed by the United Nations. They must therefore cease straight away."

- 'Massive hacking operation'-

Russia's UN envoy did not comment on the French accusations but defended Russia's actions in Ukraine.

The Russian group is said to target personal email accounts to retrieve data and messages, or gain access to other systems.

In 2017, hackers hit Macron's first presidential run, leaking thousands of documents barely 24 hours before the vote.

"In the midst of the presidential election, APT28 participated in a massive hacking operation" aiming "to sow doubt and influence public opinion", France's foreign ministry said in a video shared by Barrot on X.

"Thousands of documents were stolen and disseminated, hoping to manipulate voters, but the manoeuvre failed to really impact the electoral process," the ministry video said.

Macron easily won the election in a second-round runoff against far-right veteran Marine Le Pen. French officials have also warned in the past over the risk of interference in elections set for 2027, when the far right is expected to be a major contender.

Media is another key target of the hackers, the foreign ministry added.

In 2015, ATP28 -- posing as Islamic State militants -- hacked the French TV5 Monde channel "to manipulate public opinion" and "create a panic in France", it said.

France has been a frequent target of Islamist attacks over the last decade, notably in 2015 when at the Bataclan concert hall in Paris.

- 'Constant pressure' -

Several international intelligence services, including German authorities, warned in September 2024 of Fancy Bear cyberattacks against NATO countries.

The group is "targeting our partners," the foreign ministry video said, adding that Ukraine has been one of the group's "priorities" since Russia's 2022 invasion.

"APT28 is also being used to exert constant pressure on Ukrainian infrastructure in the context of Russia's war of aggression against Ukraine," the foreign ministry said.

Poland, a staunch ally of Kyiv, has warned that Moscow might seek to interfere with a presidential vote set for May 18 through cyberattacks and disinformation.

France and Poland will sign a "friendship treaty" on May 9, when Russian President Vladimir Putin is to preside over a huge parade in Moscow to mark victory in World War II.

"Alongside its partners, France is determined to use all the means at its disposal to anticipate Russia's malicious behaviour in cyberspace, discourage it and respond to it where necessary," the foreign ministry said.

T.L.Marti--NZN