Identifying who is behind a cyber attack or an influence operation. Governments and international organisations announce it as their own assessment.
Examples: on 15 February 2018 the UK government attributed the NotPetya attack to the Russian military, and in 2020 the Council of the EU imposed sanctions on a GRU unit in connection with it.1,2
More in the operation card: NotPetya.
Sources
- UK Government (Foreign Office), Foreign Office Minister condemns Russia for NotPetya attacks, 15.02.2018
- Council of the European Union, Council Decision (CFSP) 2020/1127 of 30 July 2020 (sanctions for cyber-attacks), recitals and annex
Checked: 3 November 2026