• France accuses Russia's GRU of cyberattacks dating back to 2015.
• APT28 targeted key French entities, including ministries and organizations linked to the 2024 Olympics.
• This marks the first official attribution of cyberattacks to the Russian state by France.
• French foreign minister calls these actions "unacceptable" and "destabilizing."
• French authorities enhance their intelligence capabilities through this public statement.

On April 29, France formally accused Russia's military intelligence agency, the GRU, of executing a series of cyberattacks against French entities, a first for Paris based on its own intelligence. These attacks, attributed to GRU's APT28 unit, have been ongoing since at least 2015, including a notable hack of the TV channel TV5 Monde and interference in Emmanuel Macron's 2017 presidential campaign, according to The Local, Reuters, and Le Monde.

The foreign minister, Jean-Noël Barrot, noted that APT28 has specifically targeted around ten French entities since 2021, focusing on sectors like defense, public services, and organizations linked to the upcoming 2024 Olympic Games. "We have a history of calling out Russian disinformation tactics," he stated, highlighting concerns about the potential impact of these cyber operations, particularly ahead of the Olympics, according to The Local and Reuters.

This revelation not only marks a significant shift in France's approach but is also intended as a diplomatic signal amid escalating tensions with Russia over its ongoing activities in Ukraine. France has called the actions of the Russian GRU "unacceptable and unworthy of a permanent member of the United Nations Security Council," underlining their commitment to addressing these cyber threats effectively, according to Reuters and Le Monde.

In uncovering details about the GRU unit involved, France has enhanced its intelligence capabilities. Specifically, it identified Unit 20728 based in Rostov-on-Don, which operates from the 166th Information Research Center, showcasing a strategic response to ongoing cyber threats from Russia, as reported by The Local, Reuters, and Le Monde.