The EU Council on Thursday, July 30, decided to impose restrictive measures against four Russian nationals and the Main Center of Special Technologies with the Main Intelligence Department of the Russian Armed Forces General Staff (commonly known as the GRU) for a number of cyberattacks.
In general, restrictive measures were imposed against "six individuals and three entities responsible for or involved in various cyber-attacks", the EU Council's press service reports.
These include the attempted cyber-attack against the OPCW (Organization for the Prohibition of Chemical Weapons) and those publicly known as "WannaCry", "NotPetya", and "Operation Cloud Hopper".
The sanctions imposed include a travel ban and an asset freeze. In addition, EU persons and entities are forbidden from making funds available to those listed.
Sanctions are one of the options available in the EU’s cyber diplomacy toolbox to prevent, deter and respond to malicious cyber activities directed against the EU or its member states, and this is the first time the EU has used this tool.
Read alsoData leak from Cloudflare service poses no threat to government portals – SBU
The legal framework for targeted restrictive measures against cyberattacks was adopted in May 2019 and recently renewed.
In recent years, the EU has scaled up its resilience and its ability to prevent, discourage, deter and respond to cyber threats and malicious cyber activities in order to safeguard European security and interests.
In June 2017, the EU stepped up its response by establishing a Framework for a Joint EU Diplomatic Response to Malicious Cyber Activities (the "cyber diplomacy toolbox"). The framework allows the EU and its member states to use all CFSP measures, including restrictive measures if necessary, to prevent, discourage, deter and respond to malicious cyber activities targeting the integrity and security of the EU and its member states.
Targeted restrictive measures have a deterrent and dissuasive effect and should be distinguished from attribution of responsibility to a third state.
