UK intelligence has exposed how Russian GRU sabotage units have carried out a global campaign of subversion, disinformation, and covert attacks. In its 23 July defense intelligence update, the British Defense Ministry has named the Russian units and outlined their years-long operations across Europe, Africa, and Ukraine.

On 18 July, the UK sanctioned three Russian GRU units and one interference agency, along with 18 military intelligence officers, for targeting the UK, its allies, and Ukraine. 

British report reveals global GRU operations

According to the UK Defense Ministry’s Intelligence update published on 23 July 2025, Russia is “escalating its global campaign to subvert its adversaries and increase Russian influence.”

“Whilst Russian military intelligence (GRU) is at the forefront of these efforts, Russia has also turned to an increasing variety of non-state actors to conduct a full spectrum of overt to covert activities, including espionage, assassination, sabotage, and electronic, cyber and information operations,” the update reads.

The UK identified Unit 29155, also known as the 161st Specialist Training Center, as a key actor. Its cyber wing launched the WhisperGate attack—deploying destructive malware—in Ukraine in 2022. The wider unit was behind multiple sabotage and assassination operations, including the 2018 attempted murder of Yulia and Sergei Skripal in Salisbury, the 2011 ammunition warehouse bombing in Bulgaria, and a 2014 blast in Czechia.

Unit 26165, or the 85th Main Special Services Center, has run widespread espionage operations. It also provided targeting intelligence for Russian missile strikes, including the 2022 bombing of the Mariupol theater that killed hundreds of civilians, including children.

Unit 74455, part of the Main Center for Special Technologies, has carried out cyberattacks on democratic elections, national infrastructure, and financial control systems.

The fourth entity, the African Initiative, is a Kremlin-linked interference agency. UK intelligence says it conducts information operations in Africa, including the spread of conspiracy theories aimed at undermining global health efforts.