German authorities have uncovered and exposed a sophisticated hybrid warfare campaign by Russia, which included a cyberattack on German air traffic control systems and a vast disinformation operation aimed at manipulating the 2025 federal election. The coordinated actions, attributed to Russia’s GRU military intelligence and carried out by the notorious APT28 hacking group, sought to destabilize Germany’s critical infrastructure and democratic process while the nation provides crucial military aid to Ukraine.
Story Highlights
- Russia’s GRU military intelligence hacked German air traffic control systems in August 2024 using APT28 hackers.
- Storm 1516 disinformation campaign spread deepfakes and conspiracy theories targeting Chancellor Merz and election integrity.
- Germany summoned Russian ambassador and announced new EU sanctions against hybrid warfare actors.
- Russian operations aimed to destabilize democracy while Germany provides crucial military aid to Ukraine.
Russian Hybrid Warfare Exposed
German intelligence officials revealed solid evidence linking Russia’s GRU military intelligence to the August 2024 cyberattack on Deutsche Flugsicherung, Germany’s air traffic control authority. The sophisticated operation, carried out by the notorious APT28 hacking group also known as Fancy Bear, represents a direct assault on critical infrastructure that ensures aviation safety. Foreign Ministry spokesperson Martin Giese confirmed the attribution bears the clear “handwriting” of Russian state-sponsored cyber operations, marking the first public identification of GRU involvement in this specific attack.
German intelligence services have identified the hacker group behind the #cyberattack against German Air Safety in August 2024 as the #APT28, a collective run by #Russia’s military intelligence service #GRU, Berlin said on Friday. https://t.co/ynfqAePh3Q pic.twitter.com/7SGX11rW1E
— Arab News (@arabnews) December 13, 2025
Election Interference Through Disinformation
The Storm 1516 disinformation campaign operated since at least 2023, targeting Germany’s February 2025 federal election with deepfakes, conspiracy theories, and false claims designed to undermine democratic institutions. Russian operatives specifically targeted Chancellor Friedrich Merz, former Foreign Minister Annalena Baerbock, and former Economy Minister Robert Habeck while spreading fabricated stories about ballot irregularities favoring the far-right AfD party. BfV domestic intelligence chief Sinan Selen warned that this “disinformation ecosystem” exploits influencers, conspiracy theorists, and right-wing extremists to attack Germany’s democratic order from within.
The timing of these operations reveals Russia’s strategic intent to destabilize Germany during a crucial election period while the nation serves as Ukraine’s second-largest military aid provider. AFP fact-checkers successfully debunked the false ballot claims about Leipzig and Hamburg, demonstrating how quickly disinformation spreads compared to factual corrections. The campaign’s sophisticated nature included coordinated messaging across multiple platforms, targeting specific politicians who support strong transatlantic ties and continued Ukrainian assistance.
Germany Strikes Back with Countermeasures
German authorities summoned Russian Ambassador Sergey Nechaev on December 12, 2025, formally presenting evidence of Moscow’s hybrid warfare operations and announcing comprehensive countermeasures. The response includes new EU sanctions targeting “hybrid actors” and enhanced monitoring of Russian diplomat movements within the Schengen area beginning January 2026. Germany’s decisive action sends a clear message that attacks on democratic institutions and critical infrastructure will face serious consequences, strengthening European resolve against Russian destabilization efforts.
Russia predictably rejected the accusations as “baseless” and “absurd,” following Moscow’s standard playbook of categorical denials despite overwhelming evidence. The Kremlin’s dismissive response only reinforces the credibility of German intelligence findings and highlights Russia’s continued commitment to hybrid warfare tactics. These operations represent a clear escalation in Russia’s campaign to weaken Western support for Ukraine through cyberattacks, election interference, and systematic disinformation designed to fracture democratic societies from within.
Watch the report: Germany summons Russian ambassador, accusing Moscow of sabotage, cyberattacks, and interference
Sources:
Germany accuses Russia of cyberattack on air controllers and election interference
Germany calls in Russian ambassador over air traffic control hack claims
