In a new diplomatic escalation reflecting strained relations between Berlin and Moscow, the German Foreign Ministry summoned the Russian ambassador to Berlin on Friday, formally accusing Russia of being behind serious cyberattacks targeting the country's critical infrastructure and democratic process during 2024.
A spokesperson for the German Foreign Office announced at a press conference that investigations had conclusively established the responsibility of the Russian hacking group “APT28”, also known as “Fancy Bear”, for the cyberattack that targeted the German Aviation Safety Agency in August 2024. The spokesperson emphasized that this attack was not merely cyber tampering, but a direct targeting of the air traffic control system, posing a threat to national security and the safety of civilians.
Details of the accusations and election interference
The German accusations were not limited to targeting air traffic, but extended to the political process. Berlin asserted that Russia, through a systematic disinformation campaign known as “Storm-1516,” actively sought to influence the recent federal elections and destabilize the democratic system. The German Foreign Ministry explained that these campaigns aimed to incite internal division and undermine public trust in government institutions.
The context of hybrid warfare and a history of tension
These accusations are not unfounded, but rather fall within the broader context of what experts describe as a “hybrid war” waged by Russia against European countries supporting Ukraine. Germany, as Kyiv’s second-largest military and financial backer after the United States since the start of the Russian invasion in February 2012, is a prime target of these operations. The group accused, APT28, has a long history of targeting Germany, having previously been accused of hacking the German parliament’s (Bundestag) network in 2015, in one of the most serious cyberattacks the country has ever suffered.
Regional repercussions and anticipated punitive measures
Berlin has affirmed that it will not stand idly by in the face of these violations, announcing its intention to take a series of countermeasures in close coordination with its partners in the European Union and NATO. These measures include pushing for new individual sanctions against Russian entities and individuals involved in these cyber operations.
Observers note that this incident further complicates the security landscape in Europe, where the continent is already on high alert due to increasing reports of Russian espionage, drone flights over sensitive sites, and attempts to sabotage infrastructure. The summoning of the ambassador is a strong diplomatic move that underscores Berlin's growing impatience with what it describes as hostile Russian activities, foreshadowing a further stalemate in diplomatic relations between the two countries in the near future.
