Germany accuses Russia of cyberattacks and disinformation campaigns, summons russian ambassador

The German government has formally accused Russia of carrying out cyberattacks and large-scale disinformation operations, directly attributing recent incidents to Russia’s military intelligence service, the GRU.

In response, Germany’s Foreign Ministry summoned the Russian ambassador in Berlin on Friday, December 12, 2025.

A spokesperson for the Foreign Ministry stated that Germany has for some time observed a “massive increase in hybrid threat activities” originating from Russia, including disinformation campaigns, espionage, cyberattacks, and acts of sabotage. According to the spokesperson, the aim of these actions is “to divide society, sow distrust, provoke unrest, and undermine confidence in democratic institutions.”

German authorities made it clear to the Russian side that Moscow’s activities are being closely monitored and that Berlin is taking countermeasures in close coordination with its European partners. The German government supports the imposition of new sanctions, including travel bans, asset freezes, and restrictions on the provision of economic resources.

Germany has also confirmed that the cyberattack on the country’s air traffic control system in August 2024 has been attributed to the hacker group APT28, also known as “Fancy Bear,” which is directly linked to the GRU. According to the Foreign Ministry, there is “absolutely incontrovertible evidence” that Russia attempted to influence and destabilize both the most recent federal elections and Germany’s internal affairs.

Regarding the disinformation campaign known as “Storm 1516,” German authorities said there is credible information indicating that the operation was coordinated from Moscow. The Center for Geopolitical Expertise and the “Double-Headed Eagle” movement are believed to be behind the campaign, with support from Russia’s military intelligence service. Analyses by German intelligence services found that the campaign disseminated artificially generated pseudo-investigative reports, fabricated image sequences, fake journalist websites, and falsified witness statements across multiple platforms.

To counter future threats, Germany is planning to establish a new platform for inter-agency coordination and information-sharing aimed at addressing hybrid threats. This initiative will also include the development of a comprehensive situational overview and the assessment of individual incidents.

Starting in January 2026, cross-border travel by Russian diplomats within the Schengen Area will be monitored, the Foreign Ministry spokesperson said. The goal is to improve information-sharing and minimize intelligence-related risks. Additional bilateral restrictions on Russian diplomatic personnel are also planned, although no further details have yet been disclosed./TheGeopost.