Germany Confronts Russia Over Cyberattacks and Election Disinformation

Germany Summons Russian Ambassador Over Cyberattack and Election Interference

The German government has summoned the Russian ambassador to the Foreign Ministry following conclusive evidence linking Russian intelligence services to a major cyberattack and a coordinated disinformation campaign during Germany’s recent federal elections.

Foreign Ministry spokesperson Martin Hize confirmed that intelligence data has established Moscow’s involvement in espionage operations, cyber threats, and attempted sabotage against German institutions. The diplomatic confrontation marks a significant escalation in tensions between the two nations.

“With the help of two methods of national attribution, we can now clearly attribute the August 2024 cyberattack on the German air traffic control service to the hacker group APT 28, also known as Fancy Bear,” Hize stated during an official briefing. “Our intelligence data prove that the Russian GRU military intelligence service is responsible for this attack.”

The spokesperson further revealed that German intelligence has definitively linked Russia to the “Storm 15” campaign, which sought to influence and destabilize Germany’s democratic processes, particularly during the federal elections. According to Hize, this operation was orchestrated by the Moscow-based “Center for Geopolitical Expertise” and the “Two-Headed Eagle Movement,” both organizations supported by Russia’s GRU military intelligence service.

The Storm 15 campaign specifically targeted German political parties, spreading fabricated content through numerous fake websites. The operation disseminated videos containing falsehoods about the Christian Democratic Union/Christian Social Union (CDU/CSU) and the Green Party. Just before election day, the campaign circulated fake videos alleging forged documents for mail-in voting, a tactic apparently designed to undermine trust in the electoral system.

“The goal of these Russian cyberattacks and disinformation attacks is clear: to divide society, sow distrust, provoke rejection and weaken trust in democratic institutions,” Hize explained. “This deliberate manipulation of information is part of numerous Russian actions aimed at undermining trust in democratic institutions and processes in Germany.”

The spokesperson emphasized that these activities demonstrate how Russia poses a multifaceted threat to German security. “Russia poses a genuinely real threat to our security not only because of its aggressive war against Ukraine, but also here in Germany,” he said.

During the meeting with the Russian ambassador, German officials made it clear that they are monitoring Russia’s actions closely and are prepared to counter such operations. Hize expressed confidence in the evidence presented, stating, “We are absolutely confident in the results. And they were, of course, also clear to the Russian ambassador – he does not need lengthy proofs to understand what this is about. We can prove it… these are solid proofs. This is unequivocally, undoubtedly confirmed.”

In response to these provocations, Germany is implementing countermeasures in coordination with European partners. These include pushing for new individual sanctions against those involved in hybrid operations. Additionally, starting in January 2026, Germany will work with the European Union to monitor cross-border travel of Russian diplomats within the Schengen Area more closely, aiming to improve information sharing and reduce intelligence risks.

This incident occurs against the backdrop of already strained German-Russian relations, largely due to Russia’s ongoing war in Ukraine and previous accusations of Russian interference in Western democracies. Cybersecurity experts have long warned about the GRU-affiliated APT 28 group, which has been implicated in numerous high-profile cyber operations across Europe and North America over the past decade.

The targeting of air traffic control systems represents a particularly alarming escalation, as such attacks could potentially impact critical infrastructure and public safety. This latest confrontation underscores the evolving nature of modern geopolitical conflicts, where traditional diplomacy increasingly intersects with cybersecurity concerns and information warfare.