GRU.
Russian military intelligence agency
- Reports this week
- 0
- Active events
- 0
- Connections
- 63
What's happening
Earlier this month
-
Diana retaliates against nerve agent attacks, prompting GRU to use a list for counter-retaliation.Some support1 report
-
GRU agents infiltrated Ukrainian companies to seek targets within the Ukrainian defense sector.Some support1 report
-
Grozev identified GRU officers behind poisonings, revealing how Russian intelligence used a guesthouse in Great Yarmouth for a foreign operation prosecuted by the CPS.Some support2 reports1 development inside
One to three months ago
-
Investigations in Europe link security incidents to GRU-related suspects.Some support1 report2 developments inside
-
GRU ordered arson in the Czech Republic, orchestrated by Adrian, who acted on behalf of the Russian intelligence agency.Some support1 report
-
GRU is linked to unexplained explosions and fires at Leipzig airport hub as part of a suspected sabotage campaign across Europe.Well supported5 reports
-
GRU is controlled by Russia’s intelligence services and seeks to destabilise nations standing up to NATO.Some support1 report
-
Joshua Cammidge researched drone sites in Swindon, connecting to the high-tech surveillance project.Some support1 report
-
GRU is involved in security services competing for control of lucrative businesses.Some support1 report
-
Sanctions are being imposed on individuals and entities, with the GRU being mentioned in the context of Russia's war against Ukraine.Well supported8 reports1 development inside
-
An agency manages assets of sanctioned oligarch Mikhail Fridman while GRU conducts cyber espionage against Ukrainian asset recovery bureaucracy.Some support1 report
-
GRU is linked to Russian state cyber operations that have targeted German political and government bodies.Well supported3 reports1 development inside
-
FSB is suspected of targeting diplomatic missions, while GRU seeks to destabilize Western democracies, involving the Austrian Armed Forces and Klaudia Tanner.Some support1 report
-
GRU launched disinformation campaigns targeting French figures Léa Salamé and Edwy Plenel, while Viginum monitors the interference.Some support1 report
Gone quiet
No new reports in 90+ days-
GRU used network weak points to attack Critical National Infrastructure in Russia.Some support2 reports1 development inside
-
Alleged infiltration of the national parliament by GRU on July 20, 2026.Some support1 report
-
IISS published findings regarding a specific espionage campaign allegedly carried out by GRU.Some support1 report1 development inside
-
Russia uses shadow fleet with intelligence assets.Some support1 report
-
Japan's high-tech industry is being used to aid the Russian war effort, with components being laundered through third countries and the GRU using Japan as an espionage base.Some support3 reports1 development inside
-
GRU officers were operating in Rome, Italy, seeking air defense information for Ukraine.Some support2 reports
-
Suspected GRU involvement in attempted assassination plot against Keir Starmer.Some support1 report
No events began in the chosen period. Widen it, or reset.
Around GRU this week
News at the entities that move GRU most-
Kremlin StructuralPolitical figures Mélenchon and Le Pen exploit recent violence and riots, while both seek alignment with the Kremlin.Moves GRU
-
Crown Prosecution Service OperationalFrank Ferguson has been appointed to head the special crime division of the Crown Prosecution Service.Moves GRU
-
NATO OperationalBurnham and Badenoch discussed policy, proposing support for Ukraine and NATO allies, alongside aid investment in East Africa and local housing in Sutton.Moves GRU
-
London OperationalFranciscan Primary School is a Beacon School in London, and Joanne McCartney serves as the Deputy Mayor for Children and Families.Moves GRU
-
Security Service of Ukraine OperationalFSB and SBU thwarted a sabotage operation and attempted drone strike against a Russian military airfield in Voronezh.Moves GRU
-
Gainesville Shared contextLocal Florida counties, including Largo, are discussing growth, annexation deals, and geographical relationships.Moves GRU
Connections
The 40 strongest of 63, analyzed from the reporting. The bars show how strongly a change on one side reaches the other.-
Kremlin Structural
The Kremlin relies on GRU for its operational functions.
-
Keir Starmer Operational
Evidence suggests GRU involvement in a suspected attempted assassination plot targeting Keir Starmer.
-
Sergei Skripal Transactional
GRU is linked to the attempted murder of Sergei Skripal.
-
Adrian Structural
Adrian is documented as acting as an agent on behalf of the GRU.
-
Kyiv Operational
GRU is actively seeking operational information regarding Kyiv, including air defense details for Ukraine.
-
Czech Republic Operational
GRU was found to have ordered arson attacks within the territory of the Czech Republic.
-
Crimea Transactional
GRU was involved in the annexation of the territory of Crimea.
-
Security Service of Ukraine Operational
The relationship involves active operational counter-intelligence between the two security services.
Show all 40 connections
-
Bucharest Operational
GRU has utilized Bucharest as a base or source for recruitment activities.
-
Léa Salamé Operational
GRU carried out a targeted operation against Léa Salamé using fabricated audio and text.
-
Edwy Plenel Operational
GRU targeted Edwy Plenel through a disinformation campaign.
-
Kingdom of Great Britain Transactional
GRU targets intelligence agency officers of the Kingdom of Great Britain through sanctions.
-
Crown Prosecution Service Operational
The Crown Prosecution Service is actively investigating and prosecuting alleged contacts involving the Russian military intelligence service GRU.
-
NATO Operational
GRU actively seeks to destabilize nations and interests standing up to NATO.
-
Swindon Operational
GRU is actively targeting drone manufacturing sites located within the area of Swindon.
-
Damien Operational
Damien provided a list to a Russian contact, indicating direct operational interaction with GRU's sphere.
-
Chippenham Shared context
GRU operates from a base in Chippenham.
-
Leipzig Shared context
GRU utilized Leipzig as a location for a cargo hub involved in shipments destined for Ukraine.
-
Aeroflot Operational
GRU utilizes Aeroflot officers and infrastructure for intelligence cover operations.
-
SIS Operational
SIS is actively monitoring potential threats associated with GRU.
-
Swindon Operational
GRU is actively seeking intelligence on drone manufacturing sites located within Swindon.
-
Christo Grozev Operational
Christo Grozev identified GRU officers responsible for poisonings.
-
London Operational
The UK government, whose center of power is London, has formally designated GRU as a threat.
-
JANE Operational
GRU actively retaliated against JANE using a list.
-
Aleksandr Krasiy Structural
Leaked databases link Aleksandr Krasiy to the GRU, indicating an affiliation.
-
Armed Forces of Ukraine Operational
GRU is actively seeking targets within the Ukrainian defense sector.
-
International Institute for Strategic Studies Mentioned together
IISS published findings regarding GRU's espionage activities.
-
England Shared context
GRU conducts hostile operations and maintains a volunteer corps within England.
-
Slovakia Shared context
GRU agents are reported to be operating from Slovakia.
-
Great Yarmouth Shared context
The town of Great Yarmouth served as a location utilized by the GRU, specifically providing guesthouse accommodation.
-
Madagascar Shared context
The relationship is observed as a geopolitical backdrop where GRU's influence operations are reported to be active in Madagascar.
-
Lithuania Shared context
Evidence suggests GRU's actions are situated in the geopolitical region of Lithuania, specifically involving organized incendiary device crimes.
-
Gainesville Shared context
GRU operates in Gainesville while facing legal proceedings with the city regarding its activities.
-
Poland Shared context
GRU's alleged campaign targets are situated within the broader European defense industry context, of which Poland is a part.
-
Diana Mentioned together
Diana is mentioned in the context of retaliation related to nerve agent attacks.
-
Leipzig Shared context
GRU's activities were observed at the Leipzig airport hub.
-
Italy Shared context
GRU officers were observed operating and meeting informants within Italy.
-
Austrian Armed Forces Mentioned together
GRU is assessed to have goals that include the destabilization of Western democracies, which may include the Austrian Armed Forces.
-
Middle East Mentioned together
GRU is a specific intelligence actor whose operations are known to occur in various geopolitical regions, including the Middle East.
-
Central Intelligence Agency Mentioned together
No evidence was provided linking GRU and the Central Intelligence Agency.
History
Events by the month they beganOctober 2026
1 eventSeptember 2026
7 events- GRU agents infiltrated Ukrainian companies to seek targets within the Ukrainian defense sector.
- Investigations in Europe link security incidents to GRU-related suspects.
- GRU ordered arson in the Czech Republic, orchestrated by Adrian, who acted on behalf of the Russian intelligence agency.
- GRU is linked to unexplained explosions and fires at Leipzig airport hub as part of a suspected sabotage campaign across Europe.
- GRU is controlled by Russia’s intelligence services and seeks to destabilise nations standing up to NATO.
- Joshua Cammidge researched drone sites in Swindon, connecting to the high-tech surveillance project.
- GRU is involved in security services competing for control of lucrative businesses.
August 2026
4 events- An agency manages assets of sanctioned oligarch Mikhail Fridman while GRU conducts cyber espionage against Ukrainian asset recovery bureaucracy.
- GRU is linked to Russian state cyber operations that have targeted German political and government bodies.
- FSB is suspected of targeting diplomatic missions, while GRU seeks to destabilize Western democracies, involving the Austrian Armed Forces and Klaudia Tanner.
- GRU launched disinformation campaigns targeting French figures Léa Salamé and Edwy Plenel, while Viginum monitors the interference.
Show 2 earlier months
July 2026
7 events- Sanctions are being imposed on individuals and entities, with the GRU being mentioned in the context of Russia's war against Ukraine.
- GRU used network weak points to attack Critical National Infrastructure in Russia.
- Alleged infiltration of the national parliament by GRU on July 20, 2026.
- IISS published findings regarding a specific espionage campaign allegedly carried out by GRU.
- Russia uses shadow fleet with intelligence assets.
- Japan's high-tech industry is being used to aid the Russian war effort, with components being laundered through third countries and the GRU using Japan as an espionage base.
- GRU officers were operating in Rome, Italy, seeking air defense information for Ukraine.