Page:ISC Russia Report.pdf/12



13.GCHQ assesses that Russia is a highly capable cyber actor with a proven capability to carry out operations which can deliver a range of impacts across any sector:


 * Since 2014, Russia has carried out malicious cyber activity in order to assert itself aggressively in a number of spheres, including attempting to influence the democratic elections of other countries – for example, it has been widely reported that the Russians were behind the cyber-enabled 'hack and leak' operation to compromise the accounts of members of the French political party En Marche! in the run-up to the 2017 French elections.
 * Russia has also undertaken cyber pre-positioning activity on other nations' Critical National Infrastructure (CNI). The National Cyber Security Centre (NCSC) has advised that there is *** Russian cyber intrusion into the UK's CNI – particularly marked in the *** sectors.
 * GCHQ has also advised that Russian GRU actors have orchestrated phishing attempts against Government departments – to take one example, there were attempts against ***, the Foreign and Commonwealth Office (FCO) and the Defence Science and Technology Laboratory (DSTL) during the early stages of the investigation into the Salisbury attacks.

14.Russia has sought to employ organised crime groups to supplement its cyber skills: SIS has observed that "this comes to the very muddy nexus between business and corruption and state power in Russia". GCHQ told the Committee that there is "a quite considerable balance of intelligence now which shows the links between serious and organised crime groups and Russian state activity" and that "we've seen more evidence of *** serious and organised crime *** being connected at high levels of Russian state and Russian intelligence", in what it described as a "symbiotic relationship".

15.Russia's cyber capability, when combined with its willingness to deploy it in a malicious capacity, is a matter of grave concern, and poses an immediate and urgent threat to our national security.