SHARE
COPY LINK

GERMANY AND RUSSIA

German military aide suspected of spying for Russia

German federal prosecutors said on Wednesday that a German national working for the military had been arrested on suspicion of spying for Russia, amid warnings of increased espionage activity by Moscow.

The Russian flag flies on top of the Russian embassy in Berlin.
The Russian flag flies on top of the Russian embassy in Berlin. Photo: picture alliance/dpa | Christoph Soeder

“The accused is strongly suspected of working for a foreign intelligence service,” the federal prosecutor’s office said in a statement, adding that the suspect had offered his services to “the Russian embassy in Berlin” among other Russian institutions.

The arrested man, identified only as Thomas H. in line with German privacy rules, was detained on July 27 in the western city of Koblenz and his apartment and workplace were searched, prosecutors said. He was remanded in custody on Wednesday.

Thomas H. had worked for the army’s Equipment, Information Technology and In-Service Support Department.

“In May 2023 he approached the Russian general consulate in Bonn and the Russian embassy in Berlin and offered his cooperation,” prosecutors said.

“In the process, he passed on information he had obtained in the course of his professional activities for them to be passed on to a Russian intelligence service.”

READ ALSO: German civil servants ‘probed on Russian spy suspicion’

The investigation against him was conducted in close coordination with military intelligence and the domestic security agency, the BfV.

The arrest came after the BfV in June warned against the risk of an “aggressive Russian espionage operation” as Moscow wages its full-scale invasion of Ukraine.

Western sanctions against Russia and their support for Ukraine’s military efforts meant the Kremlin had an “increased interest” in information gathering, the BfV said in its annual report.

“In future, a more clandestine and aggressive Russian espionage operation is to be expected as well as cyberspace activities originating from Russia,” the BfV said.

Russian intelligence services were trying to “bring new employees to Germany”, as well as pursuing or renewing activities with existing staff.

In mid-April, Berlin expelled a number of Russian diplomats over espionage concerns, prompting the tit-for-tat expulsion of 20 German diplomats from Moscow.

A month later, Russia put a limit of 350 on the number of German personnel allowed in Russia, in effect forcing hundreds of civil servants and local employees working for German institutions in Russia to leave the country.

Berlin swiftly retaliated, ordering four of Moscow’s five consulates in Germany to close.

Member comments

  1. He’s lucky he’s not one of ours. He would face the death penalty if he were. He’ll get the obligatory German slap on the wrist.

Log in here to leave a comment.
Become a Member to leave a comment.

GERMANY AND RUSSIA

Germany, Czech Republic accuse Russia of cyberattacks

Germany and the Czech Republic on Friday blamed Russia for a series of recent cyberattacks, prompting the European Union to warn Moscow of consequences over its "malicious behaviour in cyberspace".

Germany, Czech Republic accuse Russia of cyberattacks

The accusations come at a time of strained relations between Moscow and the West following Russia’s 2022 invasion of Ukraine and the European Union’s support for Kyiv.

German Foreign Minister Annalena Baerbock said a newly concluded government investigation found that a cyberattack targeting members of the Social Democratic Party had been carried out by a group known as APT28.

APT28 “is steered by the military intelligence service of Russia”, Baerbock told reporters during a visit to Australia.

“In other words, it was a state-sponsored Russian cyberattack on Germany and this is absolutely intolerable and unacceptable and will have consequences.”

APT28, also known as Fancy Bear, has been accused of dozens of cyberattacks in countries around the world. Russia denies being behind such actions.

The hacking attack on German Chancellor Olaf Scholz’s SPD party was made public last year. Hackers exploited a previously unknown vulnerability in Microsoft Outlook to compromise e-mail accounts, according to Berlin.

Berlin on Friday summoned the acting charge d’affaires of the Russian embassy over the incident.

The Russian embassy in Germany said its envoy “categorically rejected the accusations that Russian state structures were involved in the given incident… as unsubstantiated and groundless”.

Arms, aerospace targeted: BerlinĀ 

German Interior Minister Nancy Faeser said the cyber campaign was orchestrated by Russia’s military intelligence service GRU and began in 2022. It also targeted German companies in the armaments and aerospace sectors, she said.

Such cyberattacks are “a threat to our democracy, national security and our free societies”, she told a joint news conference in Prague with her Czech counterpart Vit Rakusan.

“We are calling on Russia again to stop these activities,” Faeser added.

Czech government officials said some of its state institutions had also been the target of cyberattacks blamed on APT28, again by exploiting a weakness in Microsoft Outlook in 2023.

Czech Interior Minister Rakusan said his country’s infrastructure had recently experienced “higher dozens” of such attacks.

“The Czech Republic is a target. In the long term, it has been perceived by the Russian Federation as an enemy state,” he told reporters.

EU, NATO condemnation

The German and Czech findings triggered strong condemnation from the European Union.

“The malicious cyber campaign shows Russia’s continuous pattern of irresponsible behaviour in cyberspace, by targeting democratic institutions, government entities and critical infrastructure providers across the European Union and beyond,” EU foreign affairs chief Josep Borrell said.

The EU would “make use of the full spectrum of measures to prevent, deter and respond to Russia’s malicious behaviour in cyberspace”, he added.

State institutions, agencies and entities in other member states including in Poland, Lithuania, Slovakia and Sweden had been targeted by APT28 in the past, the statement added.

The latest accusations come a day after NATO expressed “deep concern” over Russia’s “hybrid actions” including disinformation, sabotage and cyber interference.

The row also comes as millions of Europeans prepare to go to the polls for the European Parliament elections in June, and concerns about foreign meddling are running high.

Czech Foreign Minister Jan Lipavsky told AFP that “pointing a finger publicly at a specific attacker is an important tool to protect national interests”.

One of the most high-profile incidents so far blamed on Fancy Bear was a cyberattack in 2015 that paralysed the computer network of the German lower house of parliament, the Bundestag. It forced the entire institution offline for days while it was fixed.

In 2020, the EU imposed sanctions on individuals and entities linked to the APT28 group over the incident.

SHOW COMMENTS