UK Exposes Russian Spies Behind Cyberattacks and Poisonings, Imposes Sanctions

The UK government has publicly identified 18 Russian spies and the units responsible for a series of cyberattacks within Britain, as well as an infiltration that involved the notorious poisoning of one Salisbury victim, David Lammy, the Foreign Secretary, announced. During a statement announcing a new round of individual sanctions, Lammy highlighted that Russian efforts have been directed at various sectors in the UK, including media, telecommunications providers, political and democratic institutions, and energy infrastructure in recent years. Among those implicated, two spies are reported to have played a role in installing XAgent spyware on a device used by Yulia Skripal, the daughter of former Russian spy Sergei Skripal, five years prior to their near-fatal poisoning with the nerve agent Novichok in Salisbury in 2018. The Skripals survived the attack; however, the incident led to the tragic death of Dawn Sturgess, who was exposed to the poison hidden in a perfume bottle. XAgent is believed to be associated with the hacking group Fancy Bear, which has links to Russia’s GRU military intelligence unit, specifically the 26165 division, currently facing sanctions. The UK government stated that some agents from this unit also contributed to targeting the bombing of the Mariupol theatre in Ukraine, which resulted in the deaths of hundreds of civilians, including children, and executed broader cyber operations in aid of President Vladimir Putin’s agenda. Lammy remarked that the UK is proactively disclosing Russian spies and hackers to bolster security, asserting that the GRU is orchestrating a campaign to destabilize Europe, undermine Ukraine’s sovereignty, and endanger the safety of British citizens. He emphasized that the Kremlin should not underestimate the UK’s vigilance in countering these threats, stating, "We see what they are trying to do in the shadows, and we won’t tolerate it." Furthermore, Lammy declared, "Putin’s hybrid threats and aggression will never break our resolve. The UK and our allies' support for Ukraine and Europe’s security is ironclad." The announcement included the publication of the alleged spies' names online. Sanctions typically encompass asset freezes and travel bans. The government also revealed sanctions against an entity called African Initiative, identified as responsible for disseminating disinformation regarding health issues in West Africa. This move to impose sanctions on intelligence operatives marks a significant escalation in the UK’s strategy, which previously prioritized targeting politicians, financial institutions, and military figures. Earlier this year, the UK government committed to expanding sanctions against numerous entities affiliated with Russia's military operations, energy exports, information warfare, and financial entities facilitating Putin's invasion of Ukraine. The Foreign Office stated that ongoing measures reflect a commitment to deter Russian aggression, recalling unmet calls for an unconditional ceasefire initiated by President Trump and endorsed by President Zelenskyy over two months ago. As of June, the Foreign Office estimated that the sanctions against Russia had hampered the state’s financial capabilities, depriving it of at least £450 billion (around $340 billion) in war funds between February 2022 and June 2025. Since his appointment last year, Lammy has adopted a stern stance against Russia, declaring that the post-Cold War era is irrevocably over and asserting that ensuring the safety of British citizens necessitates taking a stand against ‘Putin’s mafia state.’ Related Sources: • Source 1 • Source 2