Lists of sanctions
3.147.86.123
29.04.2025 02:55:41

GRU 85th Main Special Service Centre (GTsSS) (APT 28)

List

Type Entity
List name United Kingdom
Programs (1) Cyber
Listed (1) 23.10.2020

Names (10)

Last name/Name GRU 85th Main Special Service Centre (GTsSS) (APT 28)
Full name/Name GRU 85th Main Special Service Centre (GTsSS) (APT 28)
Type Primary name
Last name/Name Fancy Bears
Full name/Name Fancy Bears
Type AKA (also known as)
Last name/Name Threat Group-4127/Iron Twilight
Full name/Name Threat Group-4127/Iron Twilight
Type AKA (also known as)
Last name/Name Stronitium
Full name/Name Stronitium
Type AKA (also known as)
Last name/Name Sofacy Group
Full name/Name Sofacy Group
Type AKA (also known as)
Last name/Name Sednit
Full name/Name Sednit
Type AKA (also known as)
Last name/Name Iron Twilight
Full name/Name Iron Twilight
Type AKA (also known as)
Last name/Name APT28 (Advanced Persistent Threat)
Full name/Name APT28 (Advanced Persistent Threat)
Type AKA (also known as)
Last name/Name Tsar Team
Full name/Name Tsar Team
Type AKA (also known as)
Last name/Name Pawn Storm
Full name/Name Pawn Storm
Type AKA (also known as)

Addresses (1)

Country Russian Federation
Postal code 1

Identification documents (2)

Type Entity Parent Company: Russian Ministry of Defence
Type Entity Type: Department within Government

Notes (2)

The 85th Main Centre for Special Technologies (GTsSS) of the Russian General Staff of the Armed Forces of the Russian Federation (GRU) - also known by its field post number ‘26165’ and industry nicknames: APT28, Fancy Bear, Sofacy Group, Pawn Storm, Strontium - was involved in illegally accessing the information systems of the German Federal Parliament (Deutscher Bundestag) without permission in April and May 2015. The military intelligence officers of the 85th controlled, directed and took part in this activity, accessing the email accounts of MPs and stealing their data. Their activity interfered with the parliament’s information systems affecting its operation for several days, undermining the exercise of parliamentary functions in Germany.
The 85th Main Centre for Special Technologies (GTsSS) of the Russian General Staff of the Armed Forces of the Russian Federation (GRU) - also known by its field post number ‘26165’ and industry nicknames: APT28, Fancy Bear, Sofacy Group, Pawn Storm, Strontium - was involved in illegally accessing the information systems of the German Federal Parliament (Deutscher Bundestag) without permission in April and May 2015.The military intelligence officers of the 85th controlled, directed and took part in this activity, accessing the email accounts of MPs and stealing their data. Their activity interfered with the parliament’s information systems affecting its operation for several days, undermining the exercise of parliamentary functions in Germany.

Historical data

Names (10)

Status Historical (last time active at 28.02.2022 05:16)
Last name/Name GRU 85th Main Special Service Centre (GTsSS) (APT 28)
Full name/Name GRU 85th Main Special Service Centre (GTsSS) (APT 28)
Type Prime alias
Status Historical (last time active at 28.02.2022 05:16)
Last name/Name APT28 (Advanced Persistent Threat)
Full name/Name APT28 (Advanced Persistent Threat)
Type AKA (also known as)
Status Historical (last time active at 28.02.2022 05:16)
Last name/Name Sofacy Group
Full name/Name Sofacy Group
Type AKA (also known as)
Status Historical (last time active at 28.02.2022 05:16)
Last name/Name Pawn Storm
Full name/Name Pawn Storm
Type AKA (also known as)
Status Historical (last time active at 28.02.2022 05:16)
Last name/Name Tsar Team
Full name/Name Tsar Team
Type AKA (also known as)
Status Historical (last time active at 28.02.2022 05:16)
Last name/Name Iron Twilight
Full name/Name Iron Twilight
Type AKA (also known as)
Status Historical (last time active at 28.02.2022 05:16)
Last name/Name Sednit
Full name/Name Sednit
Type AKA (also known as)
Status Historical (last time active at 28.02.2022 05:16)
Last name/Name Threat Group-4127/Iron Twilight
Full name/Name Threat Group-4127/Iron Twilight
Type AKA (also known as)
Status Historical (last time active at 28.02.2022 05:16)
Last name/Name Stronitium
Full name/Name Stronitium
Type AKA (also known as)
Status Historical (last time active at 28.02.2022 05:16)
Last name/Name Fancy Bears
Full name/Name Fancy Bears
Type AKA (also known as)

Addresses (1)

Status Historical (last time active at 28.02.2022 05:16)
Country Russian Federation
Postal code 1
Full address Komsomol'skiy Prospekt 20 Moscow 119146 Russian Federation

Identification documents (2)

Status Historical (last time active at 28.02.2022 05:16)
Type Org Type: Department within Government
Status Historical (last time active at 28.02.2022 05:16)
Type Parent Company: Russian Ministry of Defence
Updated: 29.04.2025. 02:16
The Sanction catalog includes Latvian, United Nations, European Union, United Kingdom and Office of Foreign Assets Control and Canada subjects included in sanction list.