The European Union announced Thursday, July 30 that it had, for the first time, sanctioned six people and three entities responsible for or involved in several cyber attacks organized from Russia and China.
Read also: Cyber attacks, disinformation, industrial surveillance ... The great offensive of Chinese spies
“ The Council decided to impose restrictive measures against six persons and three entities responsible for or having participated in various cyber attacks. These include the attempted cyberattack against the OPCW (Organization for the Prohibition of Chemical Weapons) and those known as “WannaCry”, “NotPetya” and “Operation Cloud Hopper”, ”the report said. head of European diplomacy Josep Borrell in a statement. The sanctions target the GRU headquarters, Russian military intelligence, a Chinese company, a North Korean company linked to a group of hackers, four Russian nationals and two Chinese nationals, the decision published in the Official Journal of the EU said.
This is the first time that the EU has used the weapon of sanctions against cyber attacks. They include a ban on entering EU territory and an asset freeze. In addition, EU persons and entities are prohibited from making funds available to listed persons and entities.
" These measures follow the will of the European Union and its Member States to protect the integrity, security, social well-being and prosperity of our free and democratic societies, as well as the order based on rules and the proper functioning of its international organizations ”, explained Josep Borrell. " Malicious behavior in cyberspace is unacceptable because it undermines international security and stability, as well as the benefits offered by the internet and the use of information and communication technologies (ICT) “, He denounced.
Significant economic losses
The four Russian nationals sanctioned were accused of attempting to hack the computer system at the OPCW headquarters in The Hague in April 2018. They were identified and deported. The GRU, the Russian military intelligence service, has been accused of coordinating the operation.
The two Chinese nationals are involved in " Operation Cloud Hopper " which in 2010 targeted the information systems of multinational companies on six continents, including companies established in the Union, and allowed access to be obtained. unauthorized access to commercially sensitive data, causing significant economic loss, says the EU. The Chinese company Huaying Haitai is accused of having provided them with financial support.
The “ Wanna Cry ” and “ Not Petya ” attacks were carried out in 2017 using malware. This is a ransom hacking operation. The North Korean company Chosun Expo is accused of having provided " financial, technical or material support " to these attacks and of being linked to the " Lazarus Group ", a group of North Korean " hackers ".