Germany Summons Russian Ambassador Over Cyberattack and Election Disinformation

Russia’s ambassador to Germany was summoned by the Foreign Ministry on Friday after Berlin accused Moscow of orchestrating a cyberattack on the country’s air traffic control system and conducting a disinformation campaign ahead of Germany’s February general election.

Foreign Ministry spokesperson Martin Giese told reporters that German authorities had “clear evidence” linking an August 2024 cyberattack on Deutsche Flugsicherung (DFS) to APT28, also known as Fancy Bear, a sophisticated hacking group with established ties to Russia’s GRU military intelligence service. DFS is the state-owned company responsible for managing Germany’s air traffic control operations.

The accusations mark a significant escalation in diplomatic tensions between Berlin and Moscow, which have deteriorated sharply since Russia’s invasion of Ukraine in February 2022.

Giese further revealed that Russian operatives had attempted to influence and destabilize Germany’s upcoming federal election through a disinformation operation identified as “Storm 1516.” Intelligence agencies have tracked this threat actor since at least 2023, noting its involvement in campaigns to discredit Ukraine and foment discord across European nations. The same group has reportedly targeted electoral processes in Georgia and other parts of the United States.

As of Friday evening, Russia’s embassy in Berlin had not publicly responded to these latest allegations. However, the Kremlin has consistently dismissed similar accusations in the past, characterizing them as baseless claims intended to demonize Russia.

The German response will include “a series of countermeasures” coordinated with European partners, according to Giese, who added that Berlin would support new European Union sanctions targeting entities and individuals involved in hybrid warfare operations. The spokesperson did not elaborate on the specific nature of these planned countermeasures.

Cybersecurity experts note that attacks against critical infrastructure like air traffic control systems represent a particularly dangerous escalation, as such incursions could potentially endanger public safety and disrupt essential services.

This incident occurs against a backdrop of increasing cyber hostilities between Russia and Western nations. Germany and other European governments have repeatedly accused the Kremlin of targeting critical infrastructure, political organizations, and private companies through sophisticated cyber operations, viewing these actions as part of a broader strategy to destabilize the region.

The confrontation marks the latest in a series of diplomatic clashes between Berlin and Moscow. In May, Germany took the extraordinary step of recalling its ambassador to Russia following alleged Russian-backed cyberattacks affecting German defense contractors, aerospace companies, IT firms, and the ruling Social Democratic Party.

European Commission President Ursula von der Leyen earlier this year warned about Russia’s role in orchestrating a wave of cyberattacks, acts of sabotage, and political provocations across EU member states. She urged national governments to strengthen their defensive capabilities and to publicly attribute hostile activities when sufficient evidence exists.

Cybersecurity analysts point out that the targeting of election infrastructure and the spreading of disinformation has become an increasingly common tactic in modern geopolitical conflicts, allowing hostile actors to attempt to influence democratic processes without conventional military engagement.

The incident underscores the evolving nature of international conflict, where battles are increasingly fought in cyberspace rather than on traditional battlefields, creating new challenges for national security agencies and international diplomacy.

As tensions with Russia continue to mount, European officials have emphasized the need for coordinated responses to cyber threats, including enhanced information sharing, joint defensive capabilities, and a united diplomatic front when confronting state-sponsored digital aggression.