KnowSanctions
Needs review2026-10-29
Database freshnesschecked with issues

2026-10-29 03:28 UTC

The latest check has findings or incomplete steps. Not all checks have been confirmed.

daily check at 03:00 UTC
RU EN
back to search
8M

85th Main Special Service Centre (GTsSS)

Sanctioned
APT28 (Advanced Persistent Threat)
Type
organization
Subtype
Country
Russia
Listings
1 · 1 Sanctioning jurisdiction
Export
United Kingdom1 Listings

Asset freeze, Director disqualification

Sanctions listings1
JurisdictionListMeasuresDateStatus
United Kingdom
UKSL
CYB0012
Asset freezeDirector disqualification
2020-12-31activeSource
Official source conditions

Asset freeze|Director Disqualification Sanction

Source ↗
Legal bases
United Kingdom
The Cyber (Sanctions) (EU Exit) Regulations 2020statutory instrument

Source evidence

Values are preserved from their sources. Different versions are shown separately; this does not mean every value is confirmed current.

Names and aliases

  • Sofacy GroupAlias
    en
    UKSL ↗
    Record provenance
    ID
    CYB0012
    SHA-256
    39c1612b222a5661290880defec6653680b77356fcd49e513b41fd42baa5cdc9
    Snapshot
    b3c67939-cd3b-4757-9438-5c02ad8c508c
    Snapshot SHA-256
    09294883bee0e472558722211704b14f8380ea439f0b9232c5cef8b6fdbd646c
    Retrieved
    2026-07-09 20:07 UTC
    Original record (JSON)
  • 85th Main Special Service Centre (GTsSS)Primary name
    en
    UKSL ↗
    Record provenance
    ID
    CYB0012
    SHA-256
    39c1612b222a5661290880defec6653680b77356fcd49e513b41fd42baa5cdc9
    Snapshot
    b3c67939-cd3b-4757-9438-5c02ad8c508c
    Snapshot SHA-256
    09294883bee0e472558722211704b14f8380ea439f0b9232c5cef8b6fdbd646c
    Retrieved
    2026-07-09 20:07 UTC
    Original record (JSON)
  • STRONTIUMAlias
    en
    UKSL ↗
    Record provenance
    ID
    CYB0012
    SHA-256
    39c1612b222a5661290880defec6653680b77356fcd49e513b41fd42baa5cdc9
    Snapshot
    b3c67939-cd3b-4757-9438-5c02ad8c508c
    Snapshot SHA-256
    09294883bee0e472558722211704b14f8380ea439f0b9232c5cef8b6fdbd646c
    Retrieved
    2026-07-09 20:07 UTC
    Original record (JSON)
  • GRU Unit 26165Primary name
    en
    UKSL ↗
    Record provenance
    ID
    CYB0012
    SHA-256
    39c1612b222a5661290880defec6653680b77356fcd49e513b41fd42baa5cdc9
    Snapshot
    b3c67939-cd3b-4757-9438-5c02ad8c508c
    Snapshot SHA-256
    09294883bee0e472558722211704b14f8380ea439f0b9232c5cef8b6fdbd646c
    Retrieved
    2026-07-09 20:07 UTC
    Original record (JSON)
  • IRON TWILIGHTAlias
    en
    UKSL ↗
    Record provenance
    ID
    CYB0012
    SHA-256
    39c1612b222a5661290880defec6653680b77356fcd49e513b41fd42baa5cdc9
    Snapshot
    b3c67939-cd3b-4757-9438-5c02ad8c508c
    Snapshot SHA-256
    09294883bee0e472558722211704b14f8380ea439f0b9232c5cef8b6fdbd646c
    Retrieved
    2026-07-09 20:07 UTC
    Original record (JSON)
  • Tsar TeamAlias
    en
    UKSL ↗
    Record provenance
    ID
    CYB0012
    SHA-256
    39c1612b222a5661290880defec6653680b77356fcd49e513b41fd42baa5cdc9
    Snapshot
    b3c67939-cd3b-4757-9438-5c02ad8c508c
    Snapshot SHA-256
    09294883bee0e472558722211704b14f8380ea439f0b9232c5cef8b6fdbd646c
    Retrieved
    2026-07-09 20:07 UTC
    Original record (JSON)
  • SednitAlias
    en
    UKSL ↗
    Record provenance
    ID
    CYB0012
    SHA-256
    39c1612b222a5661290880defec6653680b77356fcd49e513b41fd42baa5cdc9
    Snapshot
    b3c67939-cd3b-4757-9438-5c02ad8c508c
    Snapshot SHA-256
    09294883bee0e472558722211704b14f8380ea439f0b9232c5cef8b6fdbd646c
    Retrieved
    2026-07-09 20:07 UTC
    Original record (JSON)
  • Threat Group-4127/IRON TWILIGHTAlias
    en
    UKSL ↗
    Record provenance
    ID
    CYB0012
    SHA-256
    39c1612b222a5661290880defec6653680b77356fcd49e513b41fd42baa5cdc9
    Snapshot
    b3c67939-cd3b-4757-9438-5c02ad8c508c
    Snapshot SHA-256
    09294883bee0e472558722211704b14f8380ea439f0b9232c5cef8b6fdbd646c
    Retrieved
    2026-07-09 20:07 UTC
    Original record (JSON)
  • FANCY BEARAlias
    en
    UKSL ↗
    Record provenance
    ID
    CYB0012
    SHA-256
    39c1612b222a5661290880defec6653680b77356fcd49e513b41fd42baa5cdc9
    Snapshot
    b3c67939-cd3b-4757-9438-5c02ad8c508c
    Snapshot SHA-256
    09294883bee0e472558722211704b14f8380ea439f0b9232c5cef8b6fdbd646c
    Retrieved
    2026-07-09 20:07 UTC
    Original record (JSON)
  • APT28 (Advanced Persistent Threat)Alias
    en
    UKSL ↗
    Record provenance
    ID
    CYB0012
    SHA-256
    39c1612b222a5661290880defec6653680b77356fcd49e513b41fd42baa5cdc9
    Snapshot
    b3c67939-cd3b-4757-9438-5c02ad8c508c
    Snapshot SHA-256
    09294883bee0e472558722211704b14f8380ea439f0b9232c5cef8b6fdbd646c
    Retrieved
    2026-07-09 20:07 UTC
    Original record (JSON)
  • Pawn StormAlias
    en
    UKSL ↗
    Record provenance
    ID
    CYB0012
    SHA-256
    39c1612b222a5661290880defec6653680b77356fcd49e513b41fd42baa5cdc9
    Snapshot
    b3c67939-cd3b-4757-9438-5c02ad8c508c
    Snapshot SHA-256
    09294883bee0e472558722211704b14f8380ea439f0b9232c5cef8b6fdbd646c
    Retrieved
    2026-07-09 20:07 UTC
    Original record (JSON)

Identifiers

  • CYB0012UK_UNIQUE_ID
    Country: UK
    UKSL ↗
    Record provenance
    ID
    CYB0012
    SHA-256
    39c1612b222a5661290880defec6653680b77356fcd49e513b41fd42baa5cdc9
    Snapshot
    b3c67939-cd3b-4757-9438-5c02ad8c508c
    Snapshot SHA-256
    09294883bee0e472558722211704b14f8380ea439f0b9232c5cef8b6fdbd646c
    Retrieved
    2026-07-09 20:07 UTC
    Original record (JSON)
  • 13984OFSI_GROUP_ID
    Country: UK
    UKSL ↗
    Record provenance
    ID
    CYB0012
    SHA-256
    39c1612b222a5661290880defec6653680b77356fcd49e513b41fd42baa5cdc9
    Snapshot
    b3c67939-cd3b-4757-9438-5c02ad8c508c
    Snapshot SHA-256
    09294883bee0e472558722211704b14f8380ea439f0b9232c5cef8b6fdbd646c
    Retrieved
    2026-07-09 20:07 UTC
    Original record (JSON)

Countries and roles

  • RussiaOperation
    UKSL ↗
    Record provenance
    ID
    CYB0012
    SHA-256
    39c1612b222a5661290880defec6653680b77356fcd49e513b41fd42baa5cdc9
    Snapshot
    b3c67939-cd3b-4757-9438-5c02ad8c508c
    Snapshot SHA-256
    09294883bee0e472558722211704b14f8380ea439f0b9232c5cef8b6fdbd646c
    Retrieved
    2026-07-09 20:07 UTC
    Original record (JSON)