Germany’s domestic intelligence agency, in collaboration with the FBI, NSA, and other international partners, has issued a warning about a Russian cyber group known as UNC2589. This group, linked to Russia's military intelligence unit GRU Unit 29155, has been implicated in cyberattacks targeting NATO and EU nations.

In a statement released on Monday, the Bundesverfassungsschutz, along with the FBI, the US Cybersecurity and Infrastructure Security Agency (CISA), and the NSA, highlighted the threat posed by UNC2589. This warning comes amidst growing concerns in Europe about Russian cyber activities following Moscow's invasion of Ukraine in 2022.

Earlier this year, Berlin accused Russia of multiple cyberattacks against Germany’s Social Democrats and various companies in logistics, defense, aerospace, and IT sectors.

The intelligence agency described UNC2589, also known as Cadet Blizzard or Ember Bear, as engaging in espionage and sabotage activities. These often include defacing websites and leaking stolen data.

The GRU unit associated with UNC2589 has been linked to high-profile incidents, such as the poisoning of former Russian double agent Sergei Skripal and his daughter Yulia in the UK in 2018.