Loading story…
New Zealand has sanctioned Russian military intelligence hackers from GRU Unit 29155 for cyberattacks on Ukraine, including the 2022 WhisperGate malware incident. The sanctions include asset freezes, travel bans, and prohibitions on financial dealings with the designated entities. This move aligns with similar actions by the EU, UK, and US, targeting the unit for its destructive cyber campaigns and espionage activities.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
4 references tracked. Mallory keeps watching after this page renders.
lawfaremedia.org
Open sourcetherecord.media
Open sourcetherecord.media
Open sourcetherecord.media
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
New Zealand imposed sanctions on 33 Russian individuals and entities for supporting Russia’s war against Ukraine through cyberattacks, propaganda, intelligence activity, and sanctions evasion. The measures target members of the pro-Russian hacktivist group **Cyber Army of Russia Reborn (CARR)**, figures linked to Russia’s military intelligence service including **GRU Unit 29155**, and an alleged operator of the **Media Land** bulletproof hosting service. The sanctions also name the Kremlin-backed **Internet Development Institute** and Russian IT company **LANIT**, which New Zealand said were involved in malign activity tied to Moscow’s aggression. Officials said Russian cyber actors are being used to gather intelligence, disrupt opponents, and help sustain the broader war effort, and described the move as part of a coordinated response that aligns with earlier sanctions and public attributions by the United States, United Kingdom, Canada, Ukraine, and New Zealand.
Aug 10, 2026
The European Union imposed sanctions on eight individuals accused of participating in Russian-linked cyberattacks and cybercrime, targeting figures tied to **Conti**, **TrickBot**, **Wizard Spider**, **LockBit**, **EvilCorp**, **BlackBasta**, the **Lumma** infostealer, and the pro-Russian **Cyber Army of Russia Reborn**. Those named include alleged Conti leader Vitaly Nikolayevich Kovalev, bulletproof hosting operator Alexander Volosovik, two operators associated with Lumma, two members linked to Cyber Army of Russia Reborn, and two alleged members of **GRU Unit 29155**. The sanctions were issued amid broader Western attribution of Russian state and criminal cyber activity, including disruptive operations against Ukraine and its supporters and espionage and sabotage campaigns linked to the GRU. UK government reporting has profiled Russian military intelligence cyber and hybrid operations, including activity attributed to **Unit 29155**, while the EU action also cites links to the **WhisperGate** campaign and follows French accusations of Russian cyber espionage. The measures underscore continued efforts to publicly identify and financially isolate operators supporting both state-directed and criminal cyber operations.
Jul 20, 2026
Australia, in coordination with the United States, has imposed sanctions on North Korean cybercriminals and entities accused of generating illicit revenue to support Pyongyang's weapons of mass destruction (WMD) programs. The sanctions target one individual and four entities linked to activities such as espionage, cryptocurrency theft, and fraudulent IT worker schemes, with the aim of disrupting North Korea's ability to fund its weapons development. The measures include financial restrictions and travel bans, and are part of a broader international effort to counter North Korea's destabilizing cyber operations. Australian officials highlighted that North Korean hacking groups have stolen over $2 billion in digital assets in the first three quarters of 2025, with proceeds laundered through networks in Russia, China, and other countries. The joint action underscores ongoing collaboration between Australia, the US, and other partners to push back against hostile cyber campaigns and promote responsible conduct in cyberspace. The sanctions follow similar US actions against North Korean nationals and institutions involved in laundering cybercrime proceeds.
Jul 12, 2026