GRU 85th Main Special Service Centre (GTsSS) (APT 28)
List
| Type | Entity |
|---|---|
| List name | United Kingdom |
| Programs (1) | Cyber |
| Listed (1) | 23.10.2020 |
Names (10)
| Last name/Name | GRU 85th Main Special Service Centre (GTsSS) (APT 28) |
|---|---|
| Full name/Name | GRU 85th Main Special Service Centre (GTsSS) (APT 28) |
| Type | Primary name |
| Last name/Name | Fancy Bears |
|---|---|
| Full name/Name | Fancy Bears |
| Type | AKA (also known as) |
| Last name/Name | Threat Group-4127/Iron Twilight |
|---|---|
| Full name/Name | Threat Group-4127/Iron Twilight |
| Type | AKA (also known as) |
| Last name/Name | Stronitium |
|---|---|
| Full name/Name | Stronitium |
| Type | AKA (also known as) |
| Last name/Name | Sofacy Group |
|---|---|
| Full name/Name | Sofacy Group |
| Type | AKA (also known as) |
| Last name/Name | Sednit |
|---|---|
| Full name/Name | Sednit |
| Type | AKA (also known as) |
| Last name/Name | Iron Twilight |
|---|---|
| Full name/Name | Iron Twilight |
| Type | AKA (also known as) |
| Last name/Name | APT28 (Advanced Persistent Threat) |
|---|---|
| Full name/Name | APT28 (Advanced Persistent Threat) |
| Type | AKA (also known as) |
| Last name/Name | Tsar Team |
|---|---|
| Full name/Name | Tsar Team |
| Type | AKA (also known as) |
| Last name/Name | Pawn Storm |
|---|---|
| Full name/Name | Pawn Storm |
| Type | AKA (also known as) |
Addresses (1)
| Country | Russian Federation |
|---|---|
| Postal code | 1 |
Identification documents (2)
| Type | Entity Parent Company: Russian Ministry of Defence |
|---|
| Type | Entity Type: Department within Government |
|---|
Notes (2)
| The 85th Main Centre for Special Technologies (GTsSS) of the Russian General Staff of the Armed Forces of the Russian Federation (GRU) - also known by its field post number ‘26165’ and industry nicknames: APT28, Fancy Bear, Sofacy Group, Pawn Storm, Strontium - was involved in illegally accessing the information systems of the German Federal Parliament (Deutscher Bundestag) without permission in April and May 2015. The military intelligence officers of the 85th controlled, directed and took part in this activity, accessing the email accounts of MPs and stealing their data. Their activity interfered with the parliament’s information systems affecting its operation for several days, undermining the exercise of parliamentary functions in Germany. |
| The 85th Main Centre for Special Technologies (GTsSS) of the Russian General Staff of the Armed Forces of the Russian Federation (GRU) - also known by its field post number ‘26165’ and industry nicknames: APT28, Fancy Bear, Sofacy Group, Pawn Storm, Strontium - was involved in illegally accessing the information systems of the German Federal Parliament (Deutscher Bundestag) without permission in April and May 2015.The military intelligence officers of the 85th controlled, directed and took part in this activity, accessing the email accounts of MPs and stealing their data. Their activity interfered with the parliament’s information systems affecting its operation for several days, undermining the exercise of parliamentary functions in Germany. |
Historical data
Names (10)
| Status | Historical (last time active at 28.02.2022 05:16) |
|---|---|
| Last name/Name | GRU 85th Main Special Service Centre (GTsSS) (APT 28) |
| Full name/Name | GRU 85th Main Special Service Centre (GTsSS) (APT 28) |
| Type | Prime alias |
| Status | Historical (last time active at 28.02.2022 05:16) |
|---|---|
| Last name/Name | APT28 (Advanced Persistent Threat) |
| Full name/Name | APT28 (Advanced Persistent Threat) |
| Type | AKA (also known as) |
| Status | Historical (last time active at 28.02.2022 05:16) |
|---|---|
| Last name/Name | Sofacy Group |
| Full name/Name | Sofacy Group |
| Type | AKA (also known as) |
| Status | Historical (last time active at 28.02.2022 05:16) |
|---|---|
| Last name/Name | Pawn Storm |
| Full name/Name | Pawn Storm |
| Type | AKA (also known as) |
| Status | Historical (last time active at 28.02.2022 05:16) |
|---|---|
| Last name/Name | Tsar Team |
| Full name/Name | Tsar Team |
| Type | AKA (also known as) |
| Status | Historical (last time active at 28.02.2022 05:16) |
|---|---|
| Last name/Name | Iron Twilight |
| Full name/Name | Iron Twilight |
| Type | AKA (also known as) |
| Status | Historical (last time active at 28.02.2022 05:16) |
|---|---|
| Last name/Name | Sednit |
| Full name/Name | Sednit |
| Type | AKA (also known as) |
| Status | Historical (last time active at 28.02.2022 05:16) |
|---|---|
| Last name/Name | Threat Group-4127/Iron Twilight |
| Full name/Name | Threat Group-4127/Iron Twilight |
| Type | AKA (also known as) |
| Status | Historical (last time active at 28.02.2022 05:16) |
|---|---|
| Last name/Name | Stronitium |
| Full name/Name | Stronitium |
| Type | AKA (also known as) |
| Status | Historical (last time active at 28.02.2022 05:16) |
|---|---|
| Last name/Name | Fancy Bears |
| Full name/Name | Fancy Bears |
| Type | AKA (also known as) |
Addresses (1)
| Status | Historical (last time active at 28.02.2022 05:16) |
|---|---|
| Country | Russian Federation |
| Postal code | 1 |
| Full address | Komsomol'skiy Prospekt 20 Moscow 119146 Russian Federation |
Identification documents (2)
| Status | Historical (last time active at 28.02.2022 05:16) |
|---|---|
| Type | Org Type: Department within Government |
| Status | Historical (last time active at 28.02.2022 05:16) |
|---|---|
| Type | Parent Company: Russian Ministry of Defence |
Updated: 29.04.2025. 10:16
The Sanction catalog includes Latvian, United Nations, European Union, United Kingdom and Office of Foreign Assets Control and Canada subjects included in sanction list.