GRU.
Russian military intelligence agency
- Reports this week
- 0
- Active events
- 1
- Connections
- 55
What's happening
Active this week
Earlier this month
-
Grozev identified GRU officers behind poisonings, revealing how Russian intelligence used a guesthouse in Great Yarmouth for a foreign operation prosecuted by the CPS.Some support2 reports1 development inside
-
Investigations in Europe link security incidents to GRU-related suspects.Some support1 report2 developments inside
-
GRU ordered arson in the Czech Republic, orchestrated by Adrian, who acted on behalf of the Russian intelligence agency.Some support1 report
-
GRU is linked to unexplained explosions and fires at Leipzig airport hub as part of a suspected sabotage campaign across Europe.Well supported5 reports
-
GRU is controlled by Russia’s intelligence services and seeks to destabilise nations standing up to NATO.Some support1 report
-
Joshua Cammidge researched drone sites in Swindon, connecting to the high-tech surveillance project.Some support1 report
-
GRU is involved in security services competing for control of lucrative businesses.Some support1 report
One to three months ago
-
Sanctions are being imposed on individuals and entities, with the GRU being mentioned in the context of Russia's war against Ukraine.Well supported8 reports1 development inside
-
An agency manages assets of sanctioned oligarch Mikhail Fridman while GRU conducts cyber espionage against Ukrainian asset recovery bureaucracy.Some support1 report
-
GRU is linked to Russian state cyber operations that have targeted German political and government bodies.Well supported3 reports1 development inside
-
FSB is suspected of targeting diplomatic missions, while GRU seeks to destabilize Western democracies, involving the Austrian Armed Forces and Klaudia Tanner.Some support1 report
-
GRU launched disinformation campaigns targeting French figures Léa Salamé and Edwy Plenel, while Viginum monitors the interference.Some support1 report
-
GRU used network weak points to attack Critical National Infrastructure in Russia.Some support2 reports1 development inside
-
Alleged infiltration of the national parliament by GRU on July 20, 2026.Some support1 report
-
IISS published findings regarding a specific espionage campaign allegedly carried out by GRU.Some support1 report1 development inside
-
Russia uses shadow fleet with intelligence assets.Some support1 report
-
Japan's high-tech industry is being used to aid the Russian war effort, with components being laundered through third countries and the GRU using Japan as an espionage base.Some support3 reports1 development inside
-
GRU officers were operating in Rome, Italy, seeking air defense information for Ukraine.Some support2 reports
Gone quiet
No new reports in 90+ daysNo events began in the chosen period. Widen it, or reset.
Around GRU this week
News at the entities that move GRU most-
Crown Prosecution Service OperationalAttacks in London prompted legal review by the Crown Prosecution Service (CPS).Moves GRU
-
NATO OperationalWayne Eyre advised on national security issues, specifically regarding defense spending and the requirement to meet alliance targets for NATO.Moves GRU
-
London OperationalHelen Flanagan is leading a suspected state-threat investigation through Counter Terrorism Policing in London.Moves GRU
-
Security Service of Ukraine OperationalSecurity Service of Ukraine uncovered FSB reconnaissance activity and treason, and conducted strikes on defense forces locations in Kramatorsk.Moves GRU
-
Aeroflot OperationalUnited Aircraft Corporation secured a contract for 90 aircraft, highlighting competition in the global market.Moves GRU
-
Gainesville Shared contextLocal leaders in Gainesville discussed the potential impacts of state tax policy.Moves GRU
Connections
The 33 strongest of 55, analyzed from the reporting. The bars show how strongly a change on one side reaches the other.-
Keir Starmer Operational
Evidence suggests GRU involvement in a suspected attempted assassination plot targeting Keir Starmer.
-
Adrian Structural
Adrian is documented as acting as an agent on behalf of the GRU.
-
Sergei Skripal Transactional
GRU is linked to the attempted murder of Sergei Skripal.
-
Kyiv Operational
GRU is actively seeking operational information regarding Kyiv, including air defense details for Ukraine.
-
Czech Republic Operational
GRU was found to have ordered arson attacks within the territory of the Czech Republic.
-
Crimea Transactional
GRU was involved in the annexation of the territory of Crimea.
-
Security Service of Ukraine Operational
The relationship involves active operational counter-intelligence between the two security services.
-
Bucharest Operational
GRU has utilized Bucharest as a base or source for recruitment activities.
Show all 33 connections
-
Edwy Plenel Operational
GRU targeted Edwy Plenel through a disinformation campaign.
-
Léa Salamé Operational
GRU carried out a targeted operation against Léa Salamé using fabricated audio and text.
-
Kingdom of Great Britain Transactional
GRU targets intelligence agency officers of the Kingdom of Great Britain through sanctions.
-
Swindon Operational
GRU is actively targeting drone manufacturing sites located within the area of Swindon.
-
Crown Prosecution Service Operational
The Crown Prosecution Service is actively investigating and prosecuting alleged contacts involving the Russian military intelligence service GRU.
-
NATO Operational
GRU actively seeks to destabilize nations and interests standing up to NATO.
-
Leipzig Shared context
GRU utilized Leipzig as a location for a cargo hub involved in shipments destined for Ukraine.
-
Aeroflot Operational
GRU utilizes Aeroflot officers and infrastructure for intelligence cover operations.
-
Chippenham Shared context
GRU operates from a base in Chippenham.
-
Swindon Operational
GRU is actively seeking intelligence on drone manufacturing sites located within Swindon.
-
Christo Grozev Operational
Christo Grozev identified GRU officers responsible for poisonings.
-
London Operational
The UK government, whose center of power is London, has formally designated GRU as a threat.
-
Armed Forces of Ukraine Operational
GRU is actively seeking targets within the Ukrainian defense sector.
-
International Institute for Strategic Studies Mentioned together
IISS published findings regarding GRU's espionage activities.
-
England Shared context
GRU conducts hostile operations and maintains a volunteer corps within England.
-
Great Yarmouth Shared context
The town of Great Yarmouth served as a location utilized by the GRU, specifically providing guesthouse accommodation.
-
Madagascar Shared context
The relationship is observed as a geopolitical backdrop where GRU's influence operations are reported to be active in Madagascar.
-
Lithuania Shared context
Evidence suggests GRU's actions are situated in the geopolitical region of Lithuania, specifically involving organized incendiary device crimes.
-
Gainesville Shared context
GRU operates in Gainesville while facing legal proceedings with the city regarding its activities.
-
Italy Shared context
GRU officers were observed operating and meeting informants within Italy.
-
Austrian Armed Forces Mentioned together
GRU is assessed to have goals that include the destabilization of Western democracies, which may include the Austrian Armed Forces.
-
Leipzig Shared context
GRU's activities were observed at the Leipzig airport hub.
-
Middle East Mentioned together
GRU is a specific intelligence actor whose operations are known to occur in various geopolitical regions, including the Middle East.
-
Central Intelligence Agency Mentioned together
No evidence was provided linking GRU and the Central Intelligence Agency.
-
Ron DeSantis Mentioned together
Evidence is insufficient to establish a relationship between GRU and Ron DeSantis; the available snapshot is generic.
History
Events by the month they beganSeptember 2026
7 events- GRU agents infiltrated Ukrainian companies to seek targets within the Ukrainian defense sector.
- Investigations in Europe link security incidents to GRU-related suspects.
- GRU ordered arson in the Czech Republic, orchestrated by Adrian, who acted on behalf of the Russian intelligence agency.
- GRU is linked to unexplained explosions and fires at Leipzig airport hub as part of a suspected sabotage campaign across Europe.
- GRU is controlled by Russia’s intelligence services and seeks to destabilise nations standing up to NATO.
- Joshua Cammidge researched drone sites in Swindon, connecting to the high-tech surveillance project.
- GRU is involved in security services competing for control of lucrative businesses.
August 2026
4 events- An agency manages assets of sanctioned oligarch Mikhail Fridman while GRU conducts cyber espionage against Ukrainian asset recovery bureaucracy.
- GRU is linked to Russian state cyber operations that have targeted German political and government bodies.
- FSB is suspected of targeting diplomatic missions, while GRU seeks to destabilize Western democracies, involving the Austrian Armed Forces and Klaudia Tanner.
- GRU launched disinformation campaigns targeting French figures Léa Salamé and Edwy Plenel, while Viginum monitors the interference.
July 2026
7 events- Sanctions are being imposed on individuals and entities, with the GRU being mentioned in the context of Russia's war against Ukraine.
- GRU used network weak points to attack Critical National Infrastructure in Russia.
- Alleged infiltration of the national parliament by GRU on July 20, 2026.
- IISS published findings regarding a specific espionage campaign allegedly carried out by GRU.
- Russia uses shadow fleet with intelligence assets.
- Japan's high-tech industry is being used to aid the Russian war effort, with components being laundered through third countries and the GRU using Japan as an espionage base.
- GRU officers were operating in Rome, Italy, seeking air defense information for Ukraine.