|Гла́вное управле́ние Генера́льного шта́ба Вооружённых сил Росси́йской Федера́ции|
Glavnoje upravlenije General'nogo shtaba Vooruzhonnykh sil Rossiyskoy Federatsii
Flag of the G.U. of the General Staff of the Armed Forces of Russia
|Formed||7 May 1992|
|Headquarters||Grizodubovoy Street 3, Moscow|
|Parent agency||General Staff of the Armed Forces of the Russian Federation|
|Website||Ministry of Defense Website|
The Main Directorate of the General Staff of the Armed Forces of the Russian Federation,[note 1] formerly the Main Intelligence Directorate,[note 2] and still commonly known by its previous abbreviation GRU,[note 3] is the foreign military intelligence agency of the General Staff of the Armed Forces of the Russian Federation. GRU controls the military intelligence service and maintains its own special forces units.
Unlike Russia's other security and intelligence agencies—such as the Foreign Intelligence Service (SVR), the Federal Security Service (FSB), and the Federal Protective Service (FSO), whose heads report directly to the president of Russia—the director of the GRU is subordinate to the Russian military command, reporting to the Minister of Defence and the Chief of the General Staff.
The directorate is reputedly Russia's largest foreign-intelligence agency, and is distinguished among its counterparts for its willingness to execute riskier "complicated, high stakes operations". According to unverified statements by Stanislav Lunev, a defector from the GRU, in 1997 the agency deployed six times as many agents in foreign countries as the SVR, and commanded some 25,000 Spetsnaz troops.
Origins and early history
The first Russian body for military intelligence dates from 1810, in the context of the Napoleonic Wars raging across Europe, when War Minister Michael Andreas Barclay de Tolly proposed to Emperor Alexander I of Russia the formation of the Expedition for Secret Affairs under the War Ministry (Russian: Экспедиция секретных дел при военном министерстве); two years later, it was renamed the Special Bureau (Russian: Особая канцелярия).
In 1815, the Bureau became the First Department under the General Chief of Staff. In 1836, the intelligence functions were transferred to the Second Department under the General Chief of Staff. After many name-changes through the years, in April 1906, the Military intelligence was carried out by the Fifth Department under the General Chief of Staff of the War Ministry.
The GRU's first predecessor in Soviet Russia was established by the secret order signed on 5 November 1918 by Jukums Vācietis, the first commander-in-chief of the Red Army (RKKA), and by Ephraim Sklyansky, deputy to Leon Trotsky, the civilian leader of the Red Army. (Since 2006, the Russian Federation has officially observed the date of 5 November as the professional holiday of military intelligence in Russia.)[note 4] The military human intelligence service thus established was originally known as the Registration Agency (Registrupravlenie, or Registrupr; Russian: Региструпр) of the Field Headquarters of the Revolutionary Military Council of the Republic; Simon Aralov was its first head. Its early history was marked by a series of reorganisations influenced by the Soviet-Polish War, the consolidation and restablisation of the Soviet Union, and the general reorganisation of the Red Army; this included changes to its name, status, and responsibilities.
Throughout most of the interwar period, the men and women who worked for Red Army Intelligence called it either the Fourth Department, the Intelligence Service, the Razvedupr, or the RU. […] As a result of the re-organisation [in 1926], carried out in part to break up Trotsky's hold on the army, the Fourth Department seems to have been placed directly under the control of the State Defense Council (Gosudarstvennaia komissiia oborony, or GKO), the successor of the RVSR. Thereafter its analysis and reports went directly to the GKO and the Politburo, apparently even bypassing the Red Army Staff.— Raymond W. Leonard
The first head of the Fourth Directorate was Yan Karlovich Berzin, who remained in the post from March 1924 until April 1935 (in 1938, he was arrested and executed as a Trotskyite during the Stalinist purges). Military intelligence was known for its fierce independence from the rival "internal intelligence organizations", such as the NKVD, and later KGB; however, public statements of Soviet military intelligence veterans state the Fourth Directorate, and later GRU, had always been operationally subordinate to the KGB. Military intelligence was headquartered in a small and nondescript complex west of the Kremlin, whereas the NKVD was in the very centre of Moscow, next to the building that housed People's Commissariat for Foreign Affairs at the bottom of Kuznetsky Most. Consequently, Soviet military intelligence came to be known in Soviet diplomats' cant as distant neighbours (Russian: дальние соседи) as opposed to the near neighbours of the NKVD/KGB.
The GRU was created under its current name and form by Joseph Stalin in February 1942, less than a year after the invasion of the Soviet Union by Nazi Germany. From April 1943 the GRU handled human intelligence exclusively outside the USSR. In addition to operations against the Axis powers, GRU is credited with having infiltrated the British nuclear weapon programme and up to 70 American government and scientific institutions.
During the Cold War, the GRU, like many of its Western rivals, maintained rezidenturas, or resident spies, worldwide; these included both "legal" agents, based at Soviet embassies with official diplomatic cover, and "illegal" officers without cover. It also maintained a signals intelligence (SIGINT) station in Lourdes, Cuba and other Soviet-bloc countries. Though less well known than the KGB, with which it shared a fierce rivalry, GRU is known to have been involved in several high-profile episodes; this included opening backchannel negotiations with the U.S. government during the Cuban Missile Crisis and contributing to the Profumo scandal that partly contributed to the fall of a British administration. GRU was distinguished for its "closer ties with revolutionary movements and terrorist groups, greater experience with weapons and explosives, and even tougher training for recruits"; new recruits were allegedly shown footage of a traitorous officer being fed into a crematorium alive.
The existence of the GRU was not publicized during the Soviet era, though it was mentioned in the 1931 memoirs of the first OGPU defector, Georges Agabekov, and described in detail in the 1939 autobiography, I Was Stalin's Agent, by Walter Krivitsky, the most senior Red Army intelligence officer ever to defect. GRU became widely known in Russia, and outside narrow confines of the Western intelligence community, during perestroika, due partly to the writings of "Viktor Suvorov" (Vladimir Rezun), a GRU officer who defected to Great Britain in 1978 and wrote about his experiences in the Soviet military and intelligence services. According to Suvorov, even the General Secretary of the Communist Party of the Soviet Union, the country's de facto leader, needed to undergo a security screening to enter GRU headquarters.
Following the dissolution of the USSR in December 1991, the GRU continued as an important part of Russia's intelligence services, especially since it was the only one to more or less maintain operational and institutional continuity: the KGB had been dissolved after aiding a failed coup in 1991 against the then Soviet President Mikhail Gorbachev. It is now succeeded by the Foreign Intelligence Service (SVR) and the Federal Security Service (FSB).
Evidencing its growing strategic profile, in 2006 the GRU moved to a new headquarters complex at Khoroshovskoye Shosse, which cost 9.5 billion rubles to build and incorporates 70,000 square meters. In April 2009, President Dmitry Medvedev fired then-GRU head Valentin Korabelnikov, who had headed the GRU since 1997, reportedly over Korabelnikov's objections to proposed reforms. Pursuant to these reforms, the following year, the official name of the unit was changed from "GRU" to the "Main Directorate of the Russian General Chief of Staff", or "G.U."; however, "GRU" continues to be commonly used in media.
The GRU underwent severe reductions in funding and personnel following the 2008 Russo-Georgian War, during which it failed to discover the more advanced anti-aircraft weapons obtained by Georgia. However, it continued to play a key role in several Russian operations, including in Russia's intervention in eastern Ukraine in 2014 and the subsequent annexation of Crimea. GRU agents were also implicated in numerous cyberwarfare operations across the West, including in the U.S., France, and Germany. Many of its successes took place during the tenure of Igor Sergun, who headed the service from late 2011 until his death in early January 2016. Sergun's sudden death shortly after the restoration of the GRU's influence led to speculations of foul play by Russian adversaries.
The tenure of Sergun's successor, Igor Korobov, was marked by what some news media construed as multiple high-profile setbacks, such as the thwarted 2016 coup d'état attempt in Montenegro, the failed 2018 Salisbury poisoning, and an unprecedented number of disclosed GRU agents. Korobov died on 21 November 2018, "after a serious and prolonged illness", according to the official Defence Ministry statement. His death provoked speculations and unverified reports of him having fallen ill in October that year following a harsh dressing-down from President Vladimir Putin. However, former CIA station-chief Daniel Hoffman cautioned in 2017 that some of the Russian intelligence's recent operations that appeared to be botched might have been intended for discovery. Similarly, in 2019, Eerik-Niiles Kross, a former Estonian intelligence official, opined that GRU's apparent sloppiness "has become part of the psychological warfare. It's not that they have become that much more aggressive. They want to be felt. It's part of the game."
On 2 November 2018, while marking the GU's 100th anniversary, President Putin proposed restoring the agency's former name: Главное разведывательное управление (GRU).
The GRU is organized into numerous directorates, directions, and sections. According to the data available in open sources in 1997, the structure of the Main Directorate consists of at least 12 known directorates and several other auxiliary departments.
- The First Directorate is responsible for intelligence in Europe.
- The Second Directorate is geographically responsible for the Western Hemisphere.
- The Third Directorate is geographically responsibility for Asia.
- The Fourth Directorate is geographically responsible for Africa and the Middle East.
- The Fifth Directorate is responsible for military operations intelligence, including naval and air force intelligence.
- The Sixth Directorate is responsible for signals intelligence (SIGINT) and space intelligence. It uses over 20 different types of aircraft, a fleet of 60 SIGINT collection vessels, satellites, and ground stations to collect signals intelligence. Together with FAPSI, the GRU operates SIGINT collection facilities in over 60 diplomatically protected facilities throughout the world. These agencies also operate ground collection facilities within former Soviet states' territory.
- The Seventh Directorate is responsible specifically for NATO.
- The Eighth Directorate deals with special purpose administration.
- The Ninth Directorate is responsible for military technology.
- The Tenth Directorate is the department of war economics.
- The Eleventh Directorate is the department of strategic doctrines and arms.
- The Twelfth Directorate is responsible for information warfare.
The American Congressional Research Service, based on interviews with various experts, gives the following organization of the GRU, although it acknowledges that the organization's true structure is "a closely guarded secret."
4 Regional Directorates:
- First Directorate: European Union
- Second Directorate: North and South America, the United Kingdom, Australia, and New Zealand
- Third Directorate: Asia
- Fourth Directorate: Africa
11 Mission-Specific Directorates:
- Fifth Directorate: Operational Intelligence
- Sixth Directorate: Electronic/Signals intelligence
- Seventh Directorate: NATO
- Eight Directorate: Russian Spetsnaz (special forces)
- Ninth Directorate: Military technology
- Tenth Directorate: Military economy
- Eleventh Directorate: Strategic doctrine
- Twelfth Directorate: Information Operations (separate from American information operations)
- Space Intelligence Directorate
- Operational and Technical Directorate
- External Relations Department
Unit 29155 is tasked with foreign assassinations and other covert activities aimed at destabilizing European countries. The Unit is thought to have operated in secret since at least 2008, though its existence only became publicly known in 2019. It is commanded by Maj. Gen. Andrei Vladimirovich Averyanov and based at the headquarters of the 161st Special Purpose Specialist Training Center in eastern Moscow. Its membership included decorated veterans from the Soviet war in Afghanistan and Russia's most recent series of wars in Chechnya and Ukraine. It has been linked to the 2014 Russian annexation of Crimea, the 2015 poisonings of Bulgarian arms dealer Emilian Grebev (also spelled Emilyan), the 2016 Montenegro coup attempt, and the poisoning of Russian defector Sergei Skripal. Unit 29155 operatives have also been tracked to Switzerland during the time (early 2018) other GRU units hacked the World Anti-Doping Agency (then investigating state-sponsored doping by Russian Olympians) and attempted to hack the Organisation for the Prohibition of Chemical Weapons (then investigating the Douma chemical attack by Russia-backed Bashar al-Assad and evidence in the Skripal case). Spain has also investigated the travel of Unit 29155 member Denis Sergeev (who has also used the name Sergei Fedotov) to Barcelona in 2017 around the time of the 2017 Catalan independence referendum. The unit is also accused of being behind the alleged Russian bounty program where Taliban militants were paid to kill American troops, although the program's existence is uncertain, unproven, and unverified.
Unit 54777, alternately called the 72nd Special Service Center, is one of the GRU's primary psychological warfare capabilities. Unit 54777 retains several front organizations, including InfoRos and the Institute of the Russian Diaspora. The unit originated from Soviet GLAVPUR (Glavnoye Politicheskoye Upravlenie, or the Main Political Department) and was created in early 1990s and notably employed colonel Aleksandr Viktorovich Golyev, whose memoirs were published in 2020 along with other GRU documents. In the 1990s, the unit focused on pro-Soviet disinformation in newly split republics such as Lithuania and Chechnya. In later years the unit covered a broad range of activities from running NGOs targeting Russian expatriates in Western countries (InfoRos, Institute of the Russian Diaspora, World Coordinating Council of Russian Compatriots Living Abroad, Foundation for Supporting and Protecting the Rights of Compatriots Living Abroad) and manipulating public opinion in Russia and abroad in preparation for armed conflicts such as in Georgia, Donbas or Syria.
Unit 26165, also known as Fancy Bear, STRONTIUM, and APT28, is a cyber operations/hacking group. Unit 26165 was originally created during the Cold War as the 85th Main Special Service Center, responsible for military intelligence cryptography. The Netherlands has accused Unit 26165 of also being involved in the attempted 2018 OPCW hack and targeting its investigation into the 2014 downing of Malaysia Airlines Flight 17 (MH17), for which the Dutch investigation blames pro-Russian Ukrainian separatists armed with surface-to-air missiles by Russia.
Unit 74455, also known as the Sandworm Team or the Main Center for Technologies, used various fictitious online identities (DCLeaks and Guccifer 2.0) to coordinate the release of the politically sensitive stolen documents with WikiLeaks for “maximum political impact” starting on the eve of the 2016 Democratic National Convention. Its guilt has been reported by American media and a Senate Intelligence Committee investigation. In October 2020, the United States Department of Justice indicted six Unit 74455 GRU officers for multiple cyberattacks, including the December 2015 Ukraine power grid cyberattack, the 2017 Macron e-mail leaks, the 2017 NotPetya attacks, the 2018 Winter Olympics hack (for which the GRU attempted to frame North Korea), several 2018 attacks on Skripal case investigators, and a 2018–2019 cyberattack campaign against Georgian media and the Georgian Parliament.
According to a Western assessment of the GRU seen by Reuters in the autumn of 2018, the GRU had a long-running program to run 'illegal' spies, i.e. those who work without diplomatic cover and who live under an assumed identity in foreign countries for years. The assessment said: "It plays an increasingly important role in Russia's development of Information Warfare (both defensive and offensive). It is an aggressive and well-funded organization which has the direct support of – and access to – [Russian President Vladimir] Putin, allowing freedom in its activities and leniency with regards to diplomatic and legislative scrutiny."
The United States alleges that the GRU, as well as the SVR (its civilian foreign intelligence counterpart), makes use of both legal (intelligence officers with diplomatic protection/official government roles) and illegal operatives.
Special Forces of the Main Directorate
Commonly known as the Spetsnaz GRU, it was formed in 1949. Following the dissolution of the Soviet Union in 1991, the Spetsnaz GRU remained intact as part of the Russian GRU until 2010, when it was reassigned to other agencies. In 2013, however, the decision was reversed and Spetsnaz GRU units were reassigned to GRU divisions and placed under GRU authority again.
GRU officers train at a Ministry of Defence military academy at 50 Narodnoe Opolchenie Street, with intelligence agents receiving additional training at the Cherepovets Higher Military School of Radio Electronics. The A.F. Mozhaysky Military-Space Academy has also been used to train GRU officers.
Activities by country
According to the Federation of American Scientists: "Though sometimes compared to the US Defense Intelligence Agency, [the GRU's] activities encompass those performed by nearly all joint US military intelligence agencies as well as other national US organizations. The GRU gathers human intelligence through military attaches and foreign agents. It also maintains significant signals intelligence (SIGINT) and imagery reconnaissance (IMINT) and satellite imagery capabilities." Soviet GRU Space Intelligence Directorate had put more than 130 SIGINT satellites into orbit. GRU and KGB SIGINT network employed about 350,000 specialists.
On 9 November 2018 Austrian Chancellor Sebastian Kurz said that a 70-year-old retired army colonel, identified only as "Martin M." was believed to have spied for Russia for years. The officer in question, whose name was not disclosed and who might have been approached under a false flag, was reported to have been engaged in selling official secrets to his GRU handlers from 1992 until September 2018. In July 2019, Austria's Ministry of the Interior confirmed that the colonel's handler was a Moscow-born GRU officer Igor Egorovich Zaytsev, a Russian national, for whom an international arrest warrant had been issued.
An investigation by Bellingcat and Capital identified GRU officer Denis Vyacheslavovich Sergeev (using the alias Sergey Vyacheslavovich Fedotov) as a suspect in the 2015 poisoning of Bulgarian businessman Emiliyan Gebrev (Емилиян Гебрев) in Sofia, following an attack that mirrored the techniques used in the poisoning of Sergei and Yulia Skripal. That attack has been specifically tied to Unit 29155. Three individuals were charged in absentia by the Bulgarians in January 2020.
In December 2020, Migración Colombia confirmed the expulsion of two Russian diplomats accused of espionage. One of the assailants was identified as Aleksandr Nikolayevich Belousov who, according to the National Intelligence Directorate of Colombia, is a GRU officer that had been credited by the Russian Embassy in Bogotá as a secretary. Nikolayevich, along with an SVR officer, had reportedly tried to gather intelligence on the country's electricity infrastructure on behalf of Venezuela's Maduro government.
On 17 April 2021, the Czech Republic announced its intelligence agencies had concluded that GRU officers, namely members of Russian military intelligence GRU's unit 29155, were involved in two massive ammunition depot explosions in Vrbetice (part of Vlachovice), near the Czech-Slovak border, in October 2014. The explosions killed two persons and "inflicted immense material damage, seriously endangered and disrupted the lives of many local residents", according to the Czech prime minister.
A Russian citizen named Artem Zinchenko was convicted of spying on Estonia for GRU in May 2017. In 2007 Deniss Metsavas, a Lasnamäe-born member of the Estonian Land Forces, was targeted with a honey trapping operation while visiting Smolensk. He was subsequently blackmailed into providing information to GRU handlers. His father, Pjotr Volin, was also recruited by GRU agents as leverage against Deniss, and would serve as a courier for classified information. On 5 September 2018, Major Deniss Metsavas and Pjotr Volin were charged with giving classified information to the GRU The two were convicted in February 2019.
In September 2018, Finnish police ran a large scale operation against numerous sites owned by Airiston Helmi Oy company that over years accumulated land plots and buildings close to nationally significant key straits, ports, oil refineries and other strategic locations as well as two Finnish Navy vessels. The security operation was run in parallel in multiple locations, involving Finnish National Bureau of Investigation, local police, Tax Administration, Border Guard, and Finnish Defence Forces. During the operation, a no-fly zone was declared over Turku Archipelago where key objects were located. While official cause given for the raid was multi-million euro money laundering and tax fraud, media speculated that the company had been a cover for GRU preparing infrastructure for a surprise attack on Finnish locations in case of a conflict situation.
Viktor Ilyushin, a GRU operative working as an Air Force deputy attaché, was expelled from France in 2014 for attempted espionage of the staff of François Hollande. In August 2015, a GRU unit posing as Islamic State of Iraq and the Levant supporters called CyberCaliphate took TV5Monde offline for approximately 18 hours.
GRU operatives belonging to Fancy Bear/APT 28 used fake Facebook accounts to pose as associates of Emmanuel Macron's campaign staff, with the goal of interfering with the 2017 French presidential election. Georgy Petrovich Roshka, a member of the GRU's Unit 26165 was involved in the theft of Macron's emails, and subsequent distribution via WikiLeaks.
In December 2019, Le Monde reported that the joint effort by British, Swiss, French and U.S. intelligence agencies had discovered an apparent "rear base" of GRU in southeastern France, which was presumably used by GRU for the clandestine operations carried out throughout Europe. Investigators had identified 15 agents — all of them members of GRU's Unit 29155 — who visited Haute-Savoie in the Auvergne-Rhône-Alpes, region of France from 2014 to 2018, including Alexander Petrov and Ruslan Boshirov, who are believed to be behind the poisoning of the former GRU colonel and British double agent Sergei Skripal in Salisbury in 2018.
During the 2006 Georgian–Russian espionage controversy, four officers working for the GRU Alexander Savva, Dmitry Kazantsev, Aleksey Zavgorodny and Alexander Baranov were arrested by the Counter-Intelligence Department of the Ministry of Internal Affairs of Georgia and were accused of espionage and sabotage. This spy network was managed from Armenia by GRU Colonel Anatoly Sinitsin. A few days later the arrested officers were handed over to Russia through the Organization for Security and Co-operation in Europe (OSCE).
The 2015 Bundestag hack was attributed by German intelligence to the GRU. In 2020, Germany issued an arrest warrant for Dmitry Badin, a GRU officer and Unit 26215/Fancy Bear member also accused of involvement in the 2015–2016 DNC hacks in the United States, alleging he played a leading role in the Bundestag hack.
In 2018, German officials reported a key data network used by the Chancellery, ministries, and Parliament had been breached. German media attributed the attack to a Russian Government-sponsored hacking group, either Snake/Ouroborus or Fancy Bear.
In February 2021, Germany charged German citizen Jens F., a worker whose company maintained Bundestag electrical equipment, with espionage, accusing him of providing the building's floor plans to GRU operatives in the Russian embassy in 2017. The suspect was a former army officer allegedly linked to the Stasi in the 1980s.
In September 2021, the German foreign ministry warned Russia against the continuation of a pre-election cyberattack campaign targeting German legislators, claiming it had "reliable information" linking the Ghostwriter group behind the attacks to the GRU. The prosecutor general later opened an investigation into the affair.
In September 2000, Japan expelled Captain Viktor Bogatenkov, a military attaché at the Russian Embassy in Tokyo, on allegations of espionage. Bogatenkov was a GRU agent who received classified information from Shigehiro Hagisaki (萩嵜 繁博), a researcher at the National Institute for Defense Studies.
In early 2018, an investigation by Russian opposition site Mbk.media alleged then-first secretary of the Russian Embassy in Latvia Roman Tatarka was a GRU operative and former classmate of Anatoly Chepiga.
In 2012, GRU officer Sergey Moiseyenko recruited Lithuanian Air Force officer Sergej Pusin to conduct espionage on Lithuanian and NATO military operations. Pusin additionally passed personal files on various military officers. Moiseyenko was arrested in 2014 and sentenced to 10.5 years in prison, but was pardoned and returned to Russia by President Nausėda as part of a trilateral prisoner exchange with Norway and Russia in 2019.
In March 2022, General Glen VanHerck of United States Northern Command testified that "the largest portion of the GRU members is in Mexico right now" seeking "opportunities to...influence [and access the] U.S." Mexican President López Obrador downplayed the allegation, emphasizing Mexican sovereignty and stating his country "[did not] get involved in [espionage]."
In June 2017, Moldova expelled five Russian GRU operatives with diplomatic cover from the Russian Embassy in Chisinau, as they were believed to be attempting to recruit fighters from Gagauzia to fight in the ongoing conflict with Ukraine. Russian Deputy Minister of Foreign Affairs Grigory Karasin rejected the allegations.
The two Russian nationals indicted by Montenegrin prosecution as the organisers of the attempted coup d'état in Montenegro in October 2016 are believed to be GRU officers. One of them, Eduard Vadimovich Shishmakov ("Shirokov") had been officially identified as GRU in October 2014, when Shishmakov, who then held the position of a deputy military attaché at the Russian embassy in Poland, was declared persona non grata by the Polish government.
The Netherlands and Switzerland
In mid-September 2018 the Swiss press reported that two men allegedly working for the GRU had been arrested in The Hague, the Netherlands in the spring that year, after the Salisbury poisoning incident, for planning to hack the computer systems of the Spiez Laboratory, a Swiss institute analyzing chemical weapon attacks for the Organisation for the Prohibition of Chemical Weapons (OPCW). In early October 2018, the government of the Netherlands announced they had arrested four GRU operatives on 13 April: Aleksei Morenets, Evgenii Serebriakov, Oleg Sotnikov, and Aleksey Minin. The Russians allegedly attempted to launch a major "close access" cyberattack against the headquarters of the OPCW in the Hague and also intended to travel onwards to the Spiez laboratory in Switzerland, which was testing Novichok samples from Salisbury at the time. Investigation conducted by open-source intelligence outlets in the aftermath of the Dutch government's revelations that used Russian road police databases led to identification of further 305 GRU officers whose private cars were registered at GRU headquarters in Moscow. GRU officer Denis Vyacheslavovich Sergeev has also been documented as operating in Geneva and Lausanne.
Alleged attempt to infiltrate International Criminal Court
In June 2022, the Dutch AIVD stated that GRU intelligence officer Sergey Vladimirovich Cherkasov, under the alias of Viktor Muller Ferreira, was denied entry to the Netherlands after arriving for an internship with the International Criminal Court. The AIVD described Cherkasov as a deep-cover illegal, publishing a document he is alleged to have written in 2010 reminding himself of his cover identity. As Ferreira, Cherkasov is alleged to have attended university in the United States and Republic of Ireland, building a cover identity for years as a Brazilian national with an interest in international affairs. AIVD head Erik Akerboom described the attempted infiltration as a "long-term, multi-year GRU operation that cost a lot of time, energy and money," calling it a "high-level threat."
In December 2020, the Norwegian Police Security Service stated that hackers linked to Fancy Bear and the GRU's 85th Special Services Center (GTsSS) were likely responsible for a breach of the Storting's email system earlier in the year. The Russian Embassy in Norway denied the claims.
In June 2014, Poland expelled Russian deputy military attaché Eduard Shishmakov (alias Eduard Shirokov) and three other Russian citizens accused of spying over a 2014 wiretap scandal involving the publication of wiretapped conversations between senior Polish officials. Shishmakov, an accused GRU operative, later became a key suspect in the 2016 Montenegrin coup allegations.
In October 2014, Poland arrested two alleged GRU spies. Polish Lt. Col. Zbigniew J. worked for the GRU for "several years" feeding information on unit morale and troop movements while lawyer-lobbyist Stanisław Szypowski influenced governmental circles and sought a job in the Economy Ministry while providing information on the energy sector. Both met with GRU operatives under official cover in Warsaw and were monitored by Polish counterintelligence.
In May 2020, Polish journalists, supported by former intelligence officials, accused the GRU of conducting a 700-email bomb threat campaign against Polish schools as part of a hybrid warfare strategy. Polish and Russian intelligence services did not comment on the accusations.
In March 2022, the Polish Internal Security Agency (ABW) arrested reporter Pablo Gonzalez, whom they identified as "an agent of the [GRU]," as he planned to cross the Polish-Ukrainian border. Gonzalez, a Spanish citizen of Russian origin, was found with two passports of different names and detained on suspicion of espionage. The ABW accused Gonzalez of "[carrying] out activities for Russia using his journalistic status" and traveling to worldwide zones of conflict and political instability.
On 13 February 2004, in Doha, two Russian men assassinated Zelimkhan Yandarbiyev, an exiled leader of Chechen rebels and former President of the Chechen Republic of Ichkeria, in a car-bombing. Yandarbiyev's son was also killed. Anatoly V. Belashkov and Vasily A. Bogachyov, thought to be GRU members, were found guilty of the murder by a Qatari criminal court, which said the men had acted under direct orders from the Russian leadership. A third suspected GRU agent, posted as first secretary of the Russian Embassy in Qatar, was arrested but released to his diplomatic immunity. Those sentenced were sent to Russia to serve their sentences but disappeared shortly after.
Dmitry Kozak and Vladislav Surkov, members of the Vladimir Putin administration, reportedly served in the GRU. Two Chechens, Said-Magomed Kakiev and former warlord Sulim Yamadayev were commanders of Special Battalions Vostok and Zapad ("East" and "West") that were controlled by the GRU. The battalions each included close to a thousand fighters until their disbandment in 2008.
In early 2022, Slovakia arrested four Slovak nationals described as a "Russian spying network [seeking] information about NATO and Ukraine." Two were charged with spying and bribery, with Slovak authorities alleging undercover GRU officers at the Russian Embassy paid tens of thousands of euros for the "highly sensitive" information about Slovakia, the Slovak military, and NATO. The men charged were a Slovak military academy rector and disinformation blogger; the other two were released without charge.
According to reporting by Bellingcat, El País and the Civica Media Foundation, the Audiencia Nacional is investigating a GRU group known as Unit 29155 and its operations in Spain. GRU members Denis Sergeev, Alexey Kalinin and Mikhail Opryshko are reported to have been operating in Barcelona around the time of the 2017 Catalan independence referendum.
The Sixth Directorate was responsible for maintaining the Center S covert listening post in Syria prior to its loss to the Free Syrian Army in 2014. The Sixth Directorate also operates a signals intelligence listening post at Hmeimim Air Base near Latakia.
In 2018 the Turkish government published CCTV videos from assassination of a Chechen commander Abdulvahid Edelgiriev, who was killed in 2015 in Istanbul, claiming the perpetrator was the same person as Anatoliy Chepiga ("Ruslan Boshirov") from Skripal assassination in UK.
The Spetsnaz GRU were involved in the annexation of Crimea by the Russian Federation and in the War in Donbas. During the November 2018, Kerch Strait incident, the GRU's Unit 54777 sent text messages to Ukrainian men in the border region calling on them to report for military service.
In September 2018 the Crown Prosecution Service formally named two Russian nationals, Alexander Petrov and Ruslan Boshirov (the names used by the men when entering the UK), as suspected perpetrators of the assassination attempt of the former GRU officer Sergei Skripal and his daughter in March 2018. As part of the charge announcement Scotland Yard released a detailed track of the individuals' 48 hours in the UK. This covered their arrival in the UK at Gatwick Airport, trip to Salisbury the day before the attack, trip to Salisbury on the day of the attack and return to Moscow via Heathrow Airport. The two men stayed both nights in the City Stay Hotel on Bow Road, East London and Novichok agent was found in their room after police sealed it off on 4 May 2018. British Prime Minister Theresa May told the Commons the same day that the suspects were part of the G.U. intelligence service (formerly known as GRU) and the assassination attempt was not a rogue operation and was "almost certainly" approved at a senior level of the Russian state.
As a side effect of the Skripal poisoning investigation, Russian and Western media reported conclusions made by open-source intelligence outlets that claimed that GRU operatives were issued Russian foreign travel passports with certain characteristics that would allow their tentative identification. Through further research, in the autumn of 2018, "Boshirov" was publicly exposed as Anatoliy Chepiga, a decorated GRU officer, and "Petrov" as Alexander Mishkin.
GRU officer Stanislav Lunev, who defected to the U.S. in 1992 while he was posted in Washington under the cover of a TASS news agency correspondent, in the 1990s publicized his claims that small nuclear weapons that could be fit into a knapsack or a briefcase or suitcase had been secretly pre-positioned in the U.S. and other countries around the world to be used for sabotage by Russia's agents in the event of war. U.S. Congressman Curt Weldon pursued these claims publicly while admitting that they had been found largely spurious by the FBI. Searches of the areas identified by Lunev – who admitted he had never planted any weapons in the US – have been conducted, "but law-enforcement officials have never found such weapons caches, with or without portable nuclear weapons".
On 29 December 2016 the White House sanctioned the nine entities and individuals, including the GRU as well as the FSB, for their alleged activities to disrupt and spread disinformation during the 2016 US presidential election. In addition, the United States State Department also declared 35 Russian diplomats and officials persona non grata and denied Russian government officials access to two Russian-owned installations in Maryland and New York. On 13 July 2018, an indictment to several GRU Staffers was issued. GRU Unit 26165 and Unit 74455 are alleged to be behind the DCLeaks website, and were indicted for obtaining access and distributing information from data about 500,000 voters from a state election board website as well as the email accounts of John Podesta, Hillary Clinton, and volunteers and employees of the United States Presidential Campaign of Hillary Clinton, the Democratic Congressional Campaign Committee, and the Democratic National Committee (DNC). According to information leaked by Reality Winner, the GRU attempted to hack the voting machine manufacturer VR Systems, as well as local election officials.
According to Microsoft VP Tom Burt, a GRU-run group dubbed Strontium (alternatively known as APT28, Sofacy, and Pawn Strorm, and Fancy Bear) has been engaged in spear phishing attacks against at least three campaigns in the 2018 midterm elections.
On 19 November 2021, the Coordinating Council of Russian Compatriots in the United States (CCORC) or (KCOPC) closed and on 9 March 2022 Elena Branson was accused of working as a foreign agent by the FBI.
The Head of the Russian Military Intelligence is a military officer. He is the primary military intelligence adviser to the Russian Minister of Defense and to the Russian Chief of the General Staff and to a certain extent also answers to the President of Russia if ordered so.
|No.||Head||Term||Presidents served under|
|1||Yevgeny Timokhin||November 1991 – August 1992||Boris Yeltsin|
|2||Fyodor Ladygin||August 1992 – May 1997||Boris Yeltsin|
|3||Valentin Korabelnikov||May 1997 – 24 April 2009||Boris Yeltsin|
|4||Aleksandr Shlyakhturov||24 April 2009 – 25 December 2011||Dmitry Medvedev|
|5||Igor Sergun||26 December 2011 – 3 January 2016||Dmitry Medvedev|
|6||Igor Korobov||2 February 2016 – 21 November 2018||Vladimir Putin|
|7||Igor Kostyukov||22 November 2018 – present||Vladimir Putin|
Wreath laying ceremony for past GRU agents
5th GRU chief Igor Sergun with Defence Minister Sergey Shoigu and Chief of the General Staff Valery Gerasimov
- Active measures
- Farewell Dossier
- Intelligence Directorate of the Main Staff of the Russian Navy
- Leopold Trepper, an organizer of the Soviet spy ring Rote Kapelle (Red Orchestra) prior to World War II
- Nuclear suitcase bomb
- Office of Strategic Services
- Pavel Sudoplatov
- Viktor Suvorov
- Russian: Гла́вное управле́ние Генера́льного шта́ба Вооружённых сил Росси́йской Федера́ции, tr. Glavnoje upravlenije General'nyy shtab Vooruzhonnykh sil Rossiyskoy Federatsii, IPA: [ˈɡlavnəjə rɐzˈvʲɛdɨvətʲɪlʲnəjə ʊprɐˈvlʲenʲɪjə]
- (Russian: Гла́вное разве́дывательное управле́ние, tr. Glavnoye razvedyvatel'noye upravleniye)
- Russian: ГРУ, IPA: [ɡiˈru]
- Russian: День военного разведчика
- Faulconbridge, Guy (5 October 2018). Balmforth, Richard (ed.). "What is Russia's GRU military intelligence agency?". Reuters. London.
- "Reuters Factbox on Russian military intelligence by Dmitry Solovyov". Reuters. 24 April 2009. Retrieved 15 November 2014.
- Mackinnon, Amy. "What's This Unit of Russian Spies That Keeps Getting Outed?". Foreign Policy. Retrieved 10 January 2021.
- Analysis by Nathan Hodge. "Russia's GRU: Spy agency known for brazenness back in the headlines". CNN. Retrieved 10 January 2021.
Lunev, Stanislav (12 September 1997). "Changes may be on the way for the Russian security services". PRISM. The Jamestown Foundation. 3 (14). Archived from the original on 25 November 2006.
The GRU is Russia's largest security service. It deploys six times more officers in foreign countries than the Foreign Intelligence Service (SVR), which is the successor of the First Main Directorate of the KGB. Moreover, 25,000 spetsnaz troops are directly subordinated to the GRU, whereas the KGB's various successor-organizations have been deprived of their own military formations since 1991.
- Для выяснения намерений враждебных государств…. (tr. "To ascertain the intentions of hostile states...") Krasnaya Zvezda, 19 October 2019.
- Earl F. Ziemke, Russian Review 60 (2001): 130.
- Указ Президента Российской Федерации от 31.05.2006 г. № 549: Об установлении профессиональных праздников и памятных дней в Вооруженных Силах Российской Федерации. (tr. "Decree of the President of the Russian Federation of May 31, 2006 No. 549: On the establishment of professional holidays and memorable days in the Armed Forces of the Russian Federation") kremlin.ru
- Leonard, Secret Soldiers of the Revolution, p. 7.
- Leonid Mlechin. Дальние соседи. argumenti.ru, 15 November 2018.
- "What is the GRU?". The Economist. 11 September 2018. ISSN 0013-0613. Retrieved 10 January 2021.
- What is the GRU? The Economist, 11 September 2018.
- Военная разведка: 1941–1945 (tr, "Military intelligence: 1941–1945") hrono.ru
- Главное разведывательное управление Генштаба ВС России. Справка. (tr. "Main Intelligence Directorate of the General Staff of the Russian Armed Forces. Reference") RIA Novosti, 19 March 2009.
- Leonard, Secret Soldiers of the Revolution, p.xiv.
- Solovyov, Dmitry (24 April 2009). "Russia's Medvedev sacks military spy chief". Reuters. Archived from the original on 30 December 2016. Retrieved 15 November 2014.
President Dmitry Medvedev sacked Russia's most powerful intelligence chief Friday in a move that underscores strained ties with some of the military top brass over a Kremlin-backed reform of the armed forces. The Kremlin said Medvedev had signed a decree to dismiss General Valentin Korabelnikov, who has directed Russia's military intelligence service since 1997.
- "Putin Arrives in Style at Military Spy Base". The Moscow Times. Archived from the original on 30 December 2016.
Unlike its predecessor, a drab, redbrick monolith nicknamed the Aquarium, the new GRU complex is a futuristic glass-clad and bulletproof structure that bears more than a passing resemblance to the London headquarters of Britain's MI6 [...] The complex, whose construction began in 2003, cost 9.5 billion rubles ($357 million) to build, and incorporates an area of 70,000 square meters.
- Young, John (10 August 2008). "GRU Headquarters – Russian MilIntel Eyeball". Cryptome. Archived from the original on 30 December 2016.
- "Russia military spy boss 'sacked'". BBC News. 24 April 2009. Archived from the original on 30 December 2016.
Gen Korabelnikov had been the head of military intelligence for 12 years and was a four-star general. Analysts say the 63-year-old was one of the main opponents of the planned military reforms, which could see the Russian armed forces shrink from 1.3 million serving men and women to one million. The majority of those cuts would come from the officer corps, which could see the loss of around 200,000 posts, including many generals. Some of the proposed reforms were said to have included the disbanding of several GRU-controlled army special forces (Spetsnaz) brigades and the redistribution of the command of some GRU structures to the SVR. Gen Korabelnikov is reported to have submitted his resignation in protest last November.
- Turovsky, Daniil (6 November 2018). "What is the GRU? Who gets recruited to be a spy? Why are they exposed so often? Here are the most important things you should know about Russia's intelligence community". Translated by Rothrock, Kevin. Meduza.
- Diary, Geopolitical (6 January 2016). "A Mysterious Death Raises Questions in Russia". Stratfor. Retrieved 8 March 2016.
- Yalibnan (4 March 2016). "Russian military intelligence chief killed in secret operation in Lebanon, report". Ya Libnan. Retrieved 8 March 2016.
- Russian GRU military spy chief Igor Sergun dies BBC, 5 January 2016
- Moscow, Daria Litvinova in (22 November 2018). "Russia's chief of military intelligence, Igor Korobov, dies after illness". the Guardian. Retrieved 10 January 2021.
- "Russian military intelligence head's death causes inevitable speculation: Igor Korobov knew a lot about GRU operations, including poisoning of the Skripals". The Guardian. 22 November 2018. Retrieved 22 November 2018.
- Умер начальник ГУ ГШ РФ Игорь Коробов tvzvezda.ru, 22 November 2018.
- "Источник: умер начальник Главного управления Генштаба ВС РФ Игорь Коробов" [Source: Igor Korobov, head of the Main Directorate of the General Staff of the RF Armed Forces, died]. TASS. 22 November 2018.
- "Head of Russian Skripal-linked GRU spy agency dies". BBC. 22 November 2018. Retrieved 22 November 2018.
- Igor Korobov, head of Russian spy agency accused over Salisbury attack, dies aged 63 after 'serious illness' The Telegraph, 22 November 2018.
- Cover Lifted, A CIA Spy Offers His Take On Trump And Russia NPR, 8 August 2017.
- By Daniel Hoffman. The Russians Were Involved. But It Wasn't About Collusion. The New York Times, 28 July 2017.
- Schwirtz, Michael (8 October 2019). "Top Secret Russian Unit Seeks to Destabilize Europe, Security Officials Say". The New York Times. ISSN 0362-4331. Retrieved 9 October 2019.
- Путин предложил вернуть военной разведке название ГРУ [Putin has proposed returning to the military intellegence agency the title GRU] (in Russian). Interfax. 2 November 2018. Retrieved 29 January 2020.
'Непонятно, куда исчезло слово "разведывательное" – Главное разведывательное управление, надо бы восстановить', – добавил Путин [...]
- Pike, John (26 November 1997). "Organization of the Main Intelligence Administration (GRU) Glavnoye Razvedyvatelnoye Upravlenie (GRU)". Federation of American Scientists.
- Pike, John (27 November 1997). "Signals Intelligence Programs and Activities". Federation of American Scientists. Archived from the original on 30 December 2016.
- Andrew S. Bowen (24 November 2020). Russian Military Intelligence: Background and Issues for Congress (PDF) (Report). Congressional Research Service. Retrieved 21 July 2021.
- Schwirtz, Michael (22 December 2019). "How a Poisoning in Bulgaria Exposed Russian Assassins in Europe". The New York Times.
- Sanders-Zakre, Alicia (November 2018). "Russia Charged With OPCW Hacking Attempt". Arms Control Association. Retrieved 23 July 2021.
- Ken Dilanian; Mike Memoli (15 April 2021). "Remember those Russian bounties for dead U.S. troops? Biden admin says the CIA intel is not conclusive". NBC News. Retrieved 23 July 2021.
- Mackinnon, Amy (1 July 2020). "What's This Unit of Russian Spies That Keeps Getting Outed?". foreignpolicy.com. Foreign Policy. Retrieved 23 July 2021.
- Troianovski, Anton; Nakashima, Ellen; Harris, Shane (28 December 2018). "How Russia's military intelligence agency became the covert muscle in Putin's duels with the West". The Washington Post. Archived from the original on 29 December 2018.
- Weiss, Michael. "Aquarium Leaks. Inside the GRU's Psychological Warfare Program | Free Russia Foundation". Retrieved 7 December 2020.
- "How the Dutch foiled Russian 'cyber-attack' on OPCW". BBC News. BBC. 4 October 2018. Retrieved 23 July 2021.
- Faulconbridge, Guy (5 December 2018). "What is Russia's GRU military intelligence agency?". Reuters. Retrieved 23 July 2021.
- Kaminski-Morrow, David (4 October 2018). "Russian military accused of hacking MH17 investigation". FlightGlobal. Retrieved 23 July 2021.
- "Six Russian GRU Officers Charged in Connection with Worldwide Deployment of Destructive Malware and Other Disruptive Actions in Cyberspace". DOJ Office of Public Affairs. United States Department of Justice. 19 October 2020. Retrieved 23 July 2021.
- Ball, Desmond (1993). Signals Intelligence in the Post-cold War Era: Developments in the Asia-Pacific Region. Institute of Southeast Asian Studies. p. 105. ISBN 9789813016378.
1. Andreyevka SATCOM Station, Russia
- Aid, Matthew (29 July 2012). "Russia's Andreyevka SIGINT Station". Archived from the original on 30 December 2016.
The station is located in the Maritime Province of the Russian Far East near the tiny village of Andreyevka (Google Earth transliterates the name as Andreevka) at the following geographic coordinates: 44-30-30N 133-28-28E. [...] Built during the mid-1970s by the Soviets, a former senior NSA official mentioned it to me in the late 1980s as being "the biggest and baddest of the Sov's SIGINT stations". At the station's peak during the Cold War, it was jointly manned by several hundred KGB and GRU (Soviet military intelligence) SIGINTers. Today, the station is owned and operated solely by the GRU, and it would appear that the station has not been upgraded with new equipment in quite some time.
- Aid, Matthew (12 May 2012). "Soviet Eavesdropping Station Identified". Archived from the original on 30 December 2016.
Andreyevka SATCOM Station: 44-30-30N 133-28-28E Some of these stations are still apparently active (the largest of which is the Andreyevka station near Vladivostok), although to what degree they are still working COMSAT targets cannot be determined from imagery available on Google Maps.
- McDermott, Roger (2 November 2010). "Bat or Mouse? The Strange Case of Reforming Spetsnaz". Jamestown.org. Retrieved 19 August 2014.
- "Operations of the Main Intelligence Administration (GRU) Glavnoye Razvedyvatelnoye Upravlenie – Russia / Soviet Intelligence Agencies". Federation of American Scientists. Retrieved 15 November 2014.
- Christopher Andrew and Vasili Mitrokhin (2000). The Mitrokhin Archive: The KGB in Europe and the West. Gardners Books. ISBN 0-14-028487-7.
- Verdacht Russen-Spion: Pensionierter Bundesheer Oberst M. weiter in U-Haft. Kurier, 9 May 2019.
- Austrian court orders release of suspected Russian spy pending trial Reuters, 13 November 2018.
- A Kremlin Spy Mystery in Vienna Shakes the World Capital of Espionage. Observer, 13 November 2018.
- Austrian colonel spied for Moscow for decades, says Vienna: If true it ‘will not improve the relationship between Russia and EU,’ says Kurz. politico.eu, 9 November 2018.
- Großfahndung nach russischem Spion in Österreich: Er soll für den russischen Militärgeheimdienst tätig gewesen sein – offenbar als Führungsoffizier des mutmaßlichen Salzburger Spionage-Oberst. Kurier, 25 July 2019.
- Austria Launches Manhunt for Alleged Russian Spy in Secret GRU Operation
- Fitsanakis, Joseph. "Austrian court finds unnamed retired Army colonel guilty of spying for Russia". intelNews.
Martin M. reportedly served in peacekeeping missions in the Golan Heights and Cyprus before being posted at one of the Austrian Armed Forces’ two headquarters, located in the western city of Salzburg. It was around that time, say prosecutors, that the unnamed man began spying for Russia. Starting in 1992, he was in regular contact with his Russian handler, who was known to him only as “Yuri”.
- Bellingcat Investigation Team (7 February 2019). "Third Skripal Suspect Linked to 2015 Bulgaria Poisoning". Bellingcat.
- "Отрова, оръжия, или войната за "Дунарит"" [Poison, weapons, or the war for Dunarit]. Capital (in Bulgarian). 25 January 2019.
- Rakuszitzky, Moritz. "Third Suspect in Skripal Poisoning Identified as Denis Sergeev, High-Ranking GRU Officer". Bellingcat.
- Bellingcat Investigation Team (21 February 2019). "The Search for Denis Sergeev: Photographing a Ghost". Bellingcat.
- "Bulgaria Charges Three Russians In Absentia Over Attempted Murders In 2015". Radio Free Europe/Radio Liberty. 23 January 2020.
- Fitsanakis, Joseph (22 March 2021). "Bulgaria confirms arrest of six-member spy-ring allegedly working for Russia". intelNews.
On Friday, March 19, the Bulgarian government confirmed the BNT report, saying that six Bulgarian citizens had been charged with espionage on behalf of the Main Directorate of the General Staff of the Russian Armed Forces, known commonly as GRU. The GRU is Russia’s foremost military intelligence agency. The six alleged spies reportedly gave Moscow secrets about Bulgarian military affairs, as well as information concerning the North Atlantic Treaty Organization (NATO) and the European Union (EU).
- Office of the General Prosecutor of Bulgaria (19 March 2021). "Разкрита група за шпионство 19.03.2021г" [Spy group revealed on 19 March 2021.] (in Bulgarian). YouTube. Archived from the original on 12 December 2021.
- Chase, Steven; Moore, Oliver; Baluja, Tamara (6 September 2012). "Ottawa expels Russian diplomats in wake of charges against Canadian". The Globe and Mail. Archived from the original on 30 December 2016.
The Harper government has expelled staff at Russia's embassy in the wake of charges filed against a Canadian military intelligence officer for allegedly passing secrets to a foreign power, The Globe and Mail has learned. [...] A Russian embassy official acknowledged the following three staffers have recently left Canada, saying, however, that all departures were routine: Lieutenant Colonel Dmitry V. Fedorchatenko, assistant defence attaché. Konstantin Kolpakov, attaché. Mikhail Nikiforov, with the administrative and technical staff. The embassy did not provide a clear explanation for the fourth name now gone from Canada's official list of diplomatic, consular and foreign government representatives: Tatiana Steklova, who had been described as "administrative and technical staff".
- Payton, Laura (20 January 2012). "Spying mystery deepens with lack of information". CBC News. Archived from the original on 30 December 2016.
Initial media reports said up to four Russian Embassy staff had been removed from a list of embassy and diplomatic staff recognized by Canada. CBC News has confirmed that two have had their credentials revoked since news broke of the naval officer's arrest, while two diplomats left the country a month or more before the arrest this week of Canadian Sub.-Lt. Jeffrey Paul Delisle.
- "Colombia confirms exit of Russian officials, local media alleges spying". Reuters. 22 December 2020.
- "Por espionaje, dos diplomáticos rusos fueron expulsados de Colombia" [For espionage, two Russian diplomats were expelled from Colombia].
- "Exclusivo: Estos dos diplomáticos rusos estaban haciendo espionaje en Colombia" [Exclusive: These two Russian diplomats were doing espionage in Colombia]. 22 December 2020.
- "Czech Republic Expels 18 Russian Diplomats Over Depot Blast; Searches For Skripal Poisoning Suspects". Radio Free Europe/Radio Liberty. 17 March 2021. Retrieved 18 April 2021.
- "Estonia Sentences Russian Spy to Five Years in Prison". The Moscow Times. 8 May 2017. Archived from the original on 13 May 2017. Retrieved 13 May 2017.
Zinchenko has lived in Estonia on a residence permit since 2013. The Estonian court determined that he was recruited by Russia's Main Intelligence Directorate (GRU) in 2009, and spent the next four years collecting information about troop movements in Estonia, and about objects of national importance. [...] Zinchenko reportedly passed sensitive information to members of the GRU on multiple occasions, both by means of special communication and in person, on visits to Saint Petersburg.
- Jones, Bruce (9 May 2017). "Tallinn jails GRU agent spying on Estonian and NATO forces". Jane's Information Group. Retrieved 13 May 2017.
Artem Zinchenko, a Russian citizen legally resident in Estonia since 2013, was convicted on 8 May of espionage for Russia's GRU military intelligence organisation. Recruited in 2009 and arrested in January 2017, Zinchenko was sentenced to five years for spying on locations, equipment, and manoeuvres of Estonian and NATO forces and critical infrastructure.
- Weiss, Michael. "The Hero Who Betrayed His Country". The Atlantic. Archived from the original on 30 June 2019.
- "Estonia Arrests Army Officer, His Father On Suspicion Of Spying For Russia". Radio Free Europe/Radio Liberty. 5 September 2018.
- Ferris-Rotman, Amie; Nakashima, Ellen (1 November 2018). "Estonia knows a lot about battling Russian spies, and the West is paying attention". The Washington Post.
- "A Dawn Raid in the Archipelago". Corporal Frisk. 22 September 2018. Retrieved 24 September 2018.
- "Масштабная полицейская операция в Финляндии: ниточки неожиданно привели в связанную с эстонцами фирму" [Large-scale police operation in Finland: the strings unexpectedly led to a company associated with Estonians]. Rus.Postimees.ee (in Russian). Retrieved 24 September 2018.
- Menn, Joseph (27 July 2017). "Exclusive: Russia used Facebook to try to spy on Macron campaign – sources". Reuters. Archived from the original on 27 July 2017. Retrieved 3 August 2017.
- "Investigative Report: On The Trail Of The 12 Indicted Russian Intelligence Officers". Translated by Coalson, Robert. Radio Free Europe/Radio Liberty. 19 July 2018.
- "Russia posted GRU agents in French Alps for EU ops — report". DW News. 5 December 2019.
- Follorou, Jacques (4 December 2019). "La Haute-Savoie, camp de base d'espions russes spécialisés dans les assassinats ciblés" [Haute-Savoie, a base camp for Russian spies specializing in targeted assassinations]. Le Monde (in French).
- Petriashvili, Diana (28 September 2006). "Tbilisi Claims Russian Troop Movements in Response to Spy Dispute". EurasiaNet. Archived from the original on 30 December 2016.
A Tbilisi city court 29 September ordered two Russian officers arrested in the Georgian capital, Dmitri Kazantsyev and Alexander Savva, and seven Georgian citizens to be held in pre-trial detention. The Russian consul in Georgia, Valeri Vasiliyev, told Rustavi-2 television that a lawyer for the officers had not been allowed into the courtroom. The Georgian Interior Ministry did not immediately comment on the allegation. The court also passed the same ruling for Konstantin Pichugin, who has been accused of espionage, but who is believed to be inside Russia's regional military headquarters, which remained surrounded by police for a second day. Moscow has refused to surrender Pichugin.
- "Georgia Arrests Russian "Intelligence Operatives"". Civil Georgia. 27 September 2006. Archived from the original on 30 December 2016.
Georgia's counter-intelligence service arrested four Russian military intelligence (GRU – Glavnoye Razvedovatelnoye Upravlenie) officers and eleven citizens of Georgia who were cooperating with Russian intelligence services, Georgian Interior Minister Vano Merabishvili said on 27 September [...] He said that two Russian intelligence operatives were arrested in Tbilisi – GRU colonel Alexander Sava, who was allegedly the chief of the group operating in Georgia, and Dimitri Kazantsev. Two others – Alexander Zavgorodny and Alexander Baranov – were arrested in Batumi, the Georgian Interior Minister said.
- Rakuszitzky, Moritz; Romein, Daniel; Dobrokhotov, Roman (22 November 2018). "Second GRU Officer Indicted in Montenegro Coup Unmasked". bellingcat.
- "Germany investigates suspected Russian cyberattacks". DW. 9 September 2021. Retrieved 6 March 2022.
- "Germany Seeks Suspected Russian GRU Hacker's Arrest: Media". The Moscow Times. 5 May 2020. Retrieved 6 March 2022.
- Eddy, Melissa (1 March 2018). "Germany Says Hackers Infiltrated Main Government Network". The New York Times. Retrieved 6 March 2022.
- "German charged with spying for Russian military intelligence". BBC News. 25 February 2021. Retrieved 6 March 2022.
- "Diplomat in spy scandal leaves Japan". The Japan Times. 10 September 2000.
- "Officer admits giving secrets to Russian spy". The Japan Times. 28 November 2000.
Hagisaki told the Tokyo District Court that he handed the MSDF documents to Viktor Bogatenkov, 44, in violation of the SDF Law. Bogatenkov, who reportedly is an agent of the Russian intelligence agency GRU, was with Hagisaki when he was arrested but refused to submit to questioning and returned to Moscow two days later.
- "Skripal poisoning suspect's colleague from GRU found in Latvia – media". Unian. 11 February 2018. Retrieved 20 April 2022.
- "Latvia says Russia targeted its foreign and defense bodies with cyber attacks". Reuters. 8 October 2018. Retrieved 20 April 2022.
- Beniušis, Vaidotas (15 November 2019). "Who are the two Russian spies pardoned by Lithuanian president?". Lithuanian National Radio and Television. Retrieved 26 May 2022.
- Olsen, Jan M. (16 October 2013). "Spy swap involves Norway, Lithuania and Russia". Defense News. Retrieved 25 May 2022.
- "Mexican leader brushes off US allegations of Russia spies". Associated Press. 25 March 2022. Retrieved 26 July 2022.
- "Mexico's president downplays U.S. claim of Russian agents in Mexico". Reuters. 25 March 2022. Retrieved 26 July 2022.
- Williams, Matthias (13 June 2017). Char, Pravin (ed.). "Exclusive: Russian diplomats expelled from Moldova recruited fighters – sources". Reuters.
- Reuters (13 June 2017). Osborn, Andrew (ed.). "Russia Says Report Its Moldova Diplomats Recruited Fighters Is 'Gossip': RIA". The New York Times. Retrieved 14 June 2017.
Allegations that five Russian diplomats expelled from Moldova last month recruited fighters for the Moscow-backed separatists in Ukraine were "idle gossip", the RIA news agency quoted a deputy Russian foreign minister as saying on Tuesday. Grigory Karasin made the comment shortly after Reuters published an exclusive report citing Moldovan government and diplomatic sources as saying that the five were ejected because of their alleged activities as undercover officers with the Russian military intelligence agency, the GRU.
- Indictment tells murky Montenegrin coup tale: Trial will hear claims of Russian involvement in plans to assassinate prime minister and stop Balkan country's NATO membership. Politico, 23 May 2017.
- Investigation Uncovers Second Russian Montenegro Coup Suspect BalkanInsight, 22 November 2018.
- Bellingcat раскрыла имя сотрудника ГРУ, подозреваемого в подготовке госпереворота в Черногории NEWSru, 22 November 2018.
- Montenegro Coup Suspect ‘Was Russian Spy in Poland’: A Russian suspected by Montenegro of masterminding the recent alleged coup attempt was a military officer who was expelled from Poland amid an espionage scandal in 2014, a Polish diplomat told BIRN. BalkanInsight, 21 February 2017.
- Russian passport leak after Salisbury may reveal spy methods The Guardian, 23 September 2018.
- Haynes, Danielle; Sakelaris, Nicholas (14 September 2018). "Netherlands expels Russians for hacking lab investigating Skripal case". UPI.
- Boffey, Daniel; Wintour, Patrick; Roth, Andrew (14 September 2018). "Dutch expelled Russians over alleged novichok lab hacking plot". The Guardian.
The Swiss daily newspaper Tages-Anzeiger reported that the men were carrying equipment that could be used to break into the Spiez laboratory's IT network when they were seized.
- Minister of Defense (4 October 2018). "Remarks Minister of Defense, 4 October in The Hague" (Press release). The Hague, Netherlands: defensie.nl. Ministry of Defence. Archived from the original on 14 August 2019. Retrieved 30 May 2020.
Aleksei MORENETS. Evgenii SEREBRIAKOV. Note that their passport numbers differ from each other by only one digit. Oleg SOTNIKOV. Aleksey MININ
- Genmajor. O. Eichelsheim (4 October 2018). "GRU close access cyber operation against OPCW" (PDF) (Press release). Defence Intelligence & Security Service. Archived (PDF) from the original on 16 May 2019. Retrieved 30 May 2020.
- "Dutch security services expel Russian spies over plot targeting chemical weapons watchdog". The Guardian. 4 October 2018.
- Netherlands Defence Intelligence and Security Service disrupts Russian cyber operation targeting OPCW government.nl, 4 October 2018.
- "305 Car Registrations May Point to Massive GRU Security Breach – bellingcat". bellingcat. 4 October 2018. Retrieved 4 October 2018.
- "GRU Globetrotters 2: The Spies Who Loved Switzerland". Bellingcat. 6 July 2019. Archived from the original on 6 July 2019.
- "Russian spy caught seeking to infiltrate ICC: Netherlands". Al Jazeera. 16 June 2022. Retrieved 16 June 2022.
- Corera, Gordon (16 June 2022). "Russian GRU spy tried to infiltrate International Criminal Court". BBC. Retrieved 16 June 2022.
- Olsen, Jan M. (9 December 2020). "Norway intel: Russians likely behind parliament hacking". The Associated Press.
- Tomovic, Dusica; Zaba, Natalia (21 February 2017). "Montenegro Coup Suspect 'Was Russian Spy in Poland'". Balkan Insight. Retrieved 6 March 2022.
- Schindler, John (22 October 2014). "Here's What We Know About The Two Suspected Spies Arrested In Poland Last Week". Business Insider. Retrieved 6 March 2022.
- "Poland convicts former gov't employee of spying for Russia". Associated Press. 5 July 2019. Retrieved 17 October 2013.
- Day, Matt (12 May 2020). "Investigation uncovers web of Russian agents behind string of bomb threats". The First News. Retrieved 6 March 2022.
- "Poland Arrests Spanish Journalist On Charges Of Spying For Russia". Radio Free Europe/Radio Liberty. 4 March 2022. Retrieved 6 March 2022.
- "Poland detains Spanish journalist suspected of spying for Russia". Al Jazeera. 4 March 2022. Retrieved 6 March 2022.
- Myters, Steven Lee (1 July 2004). "Qatar Court Convicts 2 Russians in Top Chechen's Death". The New York Times.
- Parfitt, Tom (27 June 2004). "Widow refuses to show mercy to Russians on trial for Chechen leader's killing". The Daily Telegraph. Archived from the original on 12 January 2022.
- Harding, Luke (1 September 2010). "Mystery over Russian general found dead on Turkish beach". The Guardian.
- Walsh, Nick Paton (13 June 2006). "Land of the warlords". The Guardian. Archived from the original on 30 December 2016.
Sulim Yamadayev: heads 1000 strong East battalion, controlled by the Chief Intelligence Directorate (GRU) of the Russian military. Dislikes Kadyrov [...] Said Magomed Kakiev: commander of 900-strong "West" battalion, also under GRU control. Dislikes Kadyrov.
- "Spies Still Everywhere, GRU Says". The Moscow Times. 17 July 2003. Archived from the original on 30 December 2016.
GRU commando units operate in the armed forces to provide field intelligence and carry out special operations, such as the penetration and elimination of enemy units. The military actively employs GRU commandoes in Chechnya, where they have proven to be about the most able of all military units. More than 300 commandos, intelligence officers and other GRU personnel have died in fighting in Chechnya, Korabelnikov said.
- McGregor, Andrew (26 October 2006). "Chechen Troops Accompany Russian Soldiers in Lebanon". Jamestown Foundation. Archived from the original on 30 December 2016.
In a surprise move, the Russian Defense Ministry assigned security responsibility for its team of military engineers in Lebanon to two detachments of Chechen troops [...] The East and West battalions of Chechen troops are controlled by the Russian military intelligence (GRU) and do not report directly to the Chechen government.
- Special services are making teams for extrajudicial punishment (Russian) Archived 2012-02-29 at the Wayback Machine by Igor Korolkov, Novaya Gazeta, 11 January 2007. English translation
- "Slovakia charges two suspects with spying for Russia". Euronews. Associated Press. 15 March 2022. Retrieved 26 May 2022.
- "Slovakia charges two people with espionage for Russia". Reuters. 15 March 2022. Retrieved 26 May 2022.
- Fonseca, Óscar López; Sahuquillo, María R. (27 December 2019). "Three suspected Russian spies traveled to Barcelona in 2016 and 2017". El País.
- Weiss, Michael (1 September 2016). "Russia Puts Boots on the Ground in Syria". The Daily Caller. Archived from the original on 2 September 2015.
In October 2014, the Free Syrian Army sacked a Russian listening post in Tel al-Hara, south of the Quneitra border crossing with Israel. Its location was key. A YouTube video showed a Syrian officer giving the rebels a guided tour of the office building attached to the facility. Documents hanging on the wall, in both Arabic and Russian, including the symbols for Syrian intelligence and 6th Directorate of Russia’s military intelligence agency (GRU), and photos showed spies from both countries hard at work deciphering intercepts. Maps displayed rebel positions; they also showed coordinates of Israel Defense Force units.
- Fitsanakis, Joseph (9 October 2014). "Secret Russian spy base in Syria seized by Western-backed rebels". intelNews. Archived from the original on 11 October 2014.
At some point in the video, the seal of Syrian intelligence is clearly visible, placed next to the seal of the GRU's 6th Directorate, the branch of Russian military intelligence that is tasked with collecting signals intelligence (SIGINT).
- Oryx (6 October 2014). "Captured Russian Spy Facility Reveals the Extent of Russian Aid to the Assad Regime". bellingcat. Archived from the original on 9 April 2015.
The Russian operator of Center S was the Osnaz GRU, responsible for radio electronic intelligence within Russia's Armed Forces. Although not much is known about this unit, its logos can be seen below. "Части особого назначения" – Osnaz GRU and "Военная радиоэлектронная разведка" – Military Radio Electronic Intelligence.
- Matthews, Owen. "Erdogan and Putin: Strongmen in love". Newsweek. Archived from the original on 30 December 2016.
The electronic intelligence was gathered, according to the report, by a Russian listening station at Hmemim Airport near Latakia, Syria, operated by the Sixth Directorate of GRU military intelligence.
- Tsvetkova, Maria (5 November 2015). "New photos suggest Russia's operation in Syria stretches well beyond its air campaign". Business Insider. Archived from the original on 30 December 2016.
CIT also published screenshots from the Instagram page of Ilya Gorelykh, who it said had served in Russia's GRU special forces in the past [...] In late October 2015, it showed he had uploaded pictures from Aleppo, one of which showed him holding an assault rifle while wearing civilian clothes. Another image of him posing in camouflage with three other armed men was apparently taken in Homs.
- "Beyond the airstrikes: Russia's activities on the ground in Syria". 8 November 2015. Archived from the original on 30 December 2016.
We believe that Russia's operation in Syria is a "hybrid war", not unlike the one seen in Ukraine. Apart from the airstrikes, Russia provides Assad forces with surface-to-surface rocket systems, combat vehicles, equipment, advisors, artillery support and spotters. More importantly, recently there have been more and more reports of Russian soldiers, vehicles and "volunteers" being spotted close to the frontlines.
- Agence France-Presse (22 January 2016). "Turkey alarmed by "Russian build-up" on Syria border". The National. Archived from the original on 30 December 2016.
Top Russian military officials, including figures from the GRU military intelligence service, had already visited Qamishli, it added.
- "Have Russian hitmen been killing with impunity in Turkey?". BBC News. 13 December 2016. Retrieved 4 October 2018.
- "Çeçen Komutanı Türkiye'de öldürmüşlerdi" [They killed the Chechen Commander in Turkey]. www.haberturk.com (in Turkish). Retrieved 4 October 2018.
- Notheis, Asher (14 March 2022). "Russia confirms first loss of GRU spy in war with Ukraine". Washingtonexaminer.com. Washington Examiner. Retrieved 14 March 2022.
- "Salisbury Novichok poisoning: Two Russian nationals named as suspects". BBC News. 5 September 2018. Retrieved 5 September 2018.
- "Novichok suspects – the 48-hour mission to kill caught on camera". BT News. 5 September 2018. Retrieved 5 September 2018.
- "Salisbury Novichok poisoning: Russian "hit men" charged over nerve agent attack". The Evening Standard. 5 September 2018. Retrieved 5 September 2018.
- "Guests of two-star London hotel where Salisbury suspects stayed discover Novichok was found in bedroom". The Telegraph. Archived from the original on 12 January 2022. Retrieved 5 September 2018.
- "Russia's GRU: The murky spy agency behind the Salisbury poisoning, a failed coup and US election hack". The Telegraph. Archived from the original on 12 January 2022. Retrieved 5 September 2018.
- "Skripal Suspects Confirmed as GRU Operatives: Prior European Operations Disclosed – bellingcat". bellingcat. 20 September 2018. Retrieved 24 September 2018.
- "Skripal Suspect Boshirov Identified as GRU Colonel Anatoliy Chepiga – bellingcat". bellingcat. 26 September 2018. Retrieved 4 October 2018.
- "Anatoliy Chepiga Is a Hero of Russia: The Writing Is on the Wall – bellingcat". bellingcat. 2 October 2018. Retrieved 4 October 2018.
- "Salisbury novichok suspect "helped Ukraine's deposed president flee country"". The Independent. Retrieved 4 October 2018.
- "Second Skripal Poisoning Suspect Identified as Dr. Alexander Mishkin". Bellingcat. 8 October 2018. Retrieved 9 October 2018.
- "Full report: Skripal Poisoning Suspect Dr. Alexander Mishkin, Hero of Russia". Bellingcat. 9 October 2018. Retrieved 9 October 2018.
- Stanislav Lunev (1998). Through the Eyes of the Enemy: The Autobiography of Stanislav Lunev. Regnery Publishing, Inc. ISBN 0-89526-390-4.
- Nicholas Horrock, "FBI focusing on portable nuke threat", UPI (20 December 2001).
- Steve Goldstein and Chris Mondics, "Some Weldon-backed allegations unconfirmed; Among them: A plot to crash planes into a reactor, and missing suitcase-size Soviet atomic weapons". Philadelphia Inquirer (15 March 2006) p. A7.
- "FACT SHEET: Actions in Response to Russian Malicious Cyber Activity and Harassment". whitehouse.gov. 29 December 2016. Retrieved 31 December 2016 – via National Archives.
- Conspiracy to commit an offense against the United States cdn.cnn.com, accessed 16 May 2022
- Sullivan, Eileen; Benner, Katie (13 July 2018). "12 Russian Agents Indicted in Mueller Investigation". New York Times. Retrieved 13 July 2018.
- "United States of America vs. Viktor Borisovich Netyksho, Boris Alekseyevich Antonov, Dmitriy Sergeyevich Badin, Ivan Sergeyevich Yermakov, Aleksey Viktorovich Lukashev, Sergey Aleksandrovich Morgachev, Nikolay Yuryevich Kozachek, Pavel Vyacheslavovich Yershov, Artem Andreyevich Malyshev, Aleksandr Vladimirovich Osadchuk, Aleksey Aleksandrovich Potemkin, and Anatoliy Sergeyevich Kovalev" (PDF). The New York Times. United States District Court for the District of Columbia. 13 July 2018. Retrieved 13 July 2018.
- Lee, Micah (18 July 2018). "What Mueller's Latest Indictment Reveals About Russian and U.S. Spycraft". The Intercept.
- Deputy Attorney General Rod J. Rosenstein Delivers Remarks Announcing the Indictment of Twelve Russian Intelligence Officers for Conspiring to Interfere in the 2016 Presidential Election Through Computer Hacking and Related Offenses The U.S. Department of Justice, 13 July 2018.
- Wilkie, Christina (13 July 2018). "5 key takeaways from the latest indictment in Mueller's Russia probe". CNBC. Retrieved 30 July 2018.
- "12 Russian Agents Indicted in Mueller Investigation". NY Times. 13 July 2018. Retrieved 6 August 2018.
- Poulsen, Kevin (20 July 2017). "Putin's Hackers Now Under Attack—From Microsoft". The Daily Beast.
Also known as APT28, Sofacy, Pawn Storm and Strontium—Microsoft’s preferred moniker—Fancy Bear has been conducting cyber espionage since at least 2007, breaching NATO, Obama's White House, a French television station, the World Anti-Doping Agency and countless NGOs, and militaries and civilian agencies in Europe, Central Asia and the Caucasus.
- Collier, Kevin (20 July 2018). "The Russians Who Hacked The DNC Have Targeted At Least Three 2018 Campaigns, Microsoft Says". BuzzFeed News.
Speaking on a panel at the Aspen Security Forum on Thursday, Tom Burt, Microsoft's vice president for customer security and trust, said that his team had discovered a spear-phishing campaign targeting three candidates running for election in 2018. Analysts traced them to a group Microsoft has nicknamed Strontium, which is closely tracked by every major threat intelligence company and is widely accepted to be run by the GRU, Russia’s military intelligence agency.
- "FBI Investigating Russian Diaspora Group. PROBED: Is the Coordinating Council of Russian Compatriots of the U.S. just a cultural group? Or something more?". The Daily Beast. 7 June 2021. Retrieved 8 March 2022.
- "Russian Diaspora Group in U.S. Disbands, Blaming FBI 'Foreign Agent' Probe". The Moscow Times. 20 November 2021. Retrieved 8 March 2022.
- "ЗАЯВЛЕНИЕ КСОРС США О ПРИОСТАНОВЛЕНИИ ДЕЯТЕЛЬНОСТИ" [STATEMENT US CORS SUSPENDED OPERATIONS] (in Russian). KCOPC. 18 November 2021. Archived from the original on 19 December 2021. Retrieved 8 March 2022.
- "Совет организаций российских соотечественников в США приостановил работу из-за расследования ФБР" [Council of Organizations of Russian Compatriots in the United States Suspended Work Due to FBI Investigation]. Kommersant (in Russian). 19 November 2021. Archived from the original on 9 March 2022. Retrieved 8 March 2022.
- "Минюст США обвинил главу совета российской диаспоры в работе "российским агентом"" [The US Department of Justice accused the head of the council of the Russian diaspora of working as a "Russian agent"]. Kommersant (in Russian). 9 March 2022. Archived from the original on 9 March 2022. Retrieved 8 March 2022.
- Story by Daniel Turovsky, translation by Kevin Rothrock. November 6, 2018, What is the GRU? Who gets recruited to be a spy? Why are they exposed so often? Here are the most important things you should know about Russia’s intelligence community, Meduza.
- Bowen, Andrew S. (2020) Russian Military Intelligence: Background and Issues for Congress. Congressional Research Service. Washington, D.C.
- Hastings, Max (2015). The Secret War: Spies, Codes and Guerrillas 1939–1945 (Paperback). London: William Collins. ISBN 978-0-00-750374-2.
- Suvorov, Viktor (1984). Inside Soviet Military Intelligence.
- Suvorov, Viktor (1986). Inside the Aquarium.
- Suvorov, Viktor (1988). Spetsnaz: The Inside Story of the Soviet Special Forces.
- Official Page in the Russian Ministry of Defense website
- Reuters factbox on GRU
- Reuters factbox on GRU
- The Cold War International History Project (CWIHP) for new evidence on Soviet espionage in the United States from GRU/KGB archival sources
- A Blog about the GRU's history, organization, operations, etc.
- History of military intelligence from the Agentura.ru project (in English)
- Information from FAS.org
- Another FAS site
- President Putin visits new GRU headquarters
- GRU High Command and leading GRU officers
- GRU structure