# Russia’s Cyber Operations Groups

**[xorl.wordpress.com/2021/04/16/russias-cyber-operations-groups/](https://xorl.wordpress.com/2021/04/16/russias-cyber-operations-groups/)**

[leave a comment »](https://xorl.wordpress.com/2021/04/16/russias-cyber-operations-groups/#respond)


April 16, 2021


[Some time ago I published a post where I was briefly discussing some of the most well](https://xorl.wordpress.com/2021/01/25/on-attribution-apt28-apt29-turla-no-they-are-not-the-same/)
known APT aliases associated with specific government organizations of the Russian
Federation. Since recently we had lots of additional information being released from official
sources (US and UK governments), I decided to make this into a more thorough diagram.

The sources used are listed below.

I hope that they weren’t wrong, but if you notice any mistakes, missing details or incorrect
information please let me know to update it accordingly.

_Last update: 07 APRIL 2022_


-----

-----

## Sources

 ChangeLog

[Version 4.6 (07 April 2022): Added the insignia of FSB’s 16th Centre (from UK gov)](https://www.gov.uk/government/publications/russias-fsb-malign-cyber-activity-factsheet/russias-fsb-malign-activity-factsheet)
Version 4.5 (01 April 2022): Added the FGUP TsNIIKhM
Version 4.0 (28 March 2022): Updated the FSB’s 16th Center
Version 3.5 (04 November 2021): Added 4th Section of SCO
Version 3.0 (25 April 2021): Reorder the diagram to be easier to read
Version 2.5 (25 April 2021): Added the missing parent organizations
Version 2.2 (24 April 2021): Added the missing flag
Version 2.0 (19 April 2021): Separate 6th Dir. centers (thanks to [@WylieNewmark)](https://twitter.com/WylieNewmark)
Version 1.0 (16 April 2021): First publication.

Written by xorl

April 16, 2021 at 15:31

[Posted in threat intelligence](https://xorl.wordpress.com/category/threat-intelligence/)

## Leave a Reply

Fill in your details below or click an icon to log in:

You are commenting using your WordPress.com account. ( Log Out / Change )

You are commenting using your Twitter account. ( Log Out / Change )

FYou are commenting using your Facebook account. ( Log Out / Change )

Cancel
Connecting to %s


-----