April 08, 2015 - A hacking attack on a French TV network is blamed on a Russian group that will later be accused of hacking political entities in the US.

The headquarters of French television network TV5 Monde in Paris, France. (Credit: Pierre Verdy / Agence France Presse)

The French television network TV5 Monde is attacked by hackers on April 8, 2015. A group claiming to be linked to ISIS (also known as the Islamic State) and calling itself “Cyber Caliphate” shuts down the network’s TV channels for several hours. The group also posts pro-ISIS propaganda on the station’s website.

However, on June 9, 2015, it is reported by the BBC and elsewhere that French police have decided that attack was actually done by hackers based in Russia. The “Cyber Caliphate” claim was a false front to deflect blame. Police are said to be focusing their investigation on the Russian hacking group known as Fancy Bear or APT 28. French media reports that the group has also targeted the computer systems of Russian dissidents, Ukrainian activists, and others. (BBC, 6/9/2015) (France24, 6/10/2015)

In July 2016, the Washington Post will report that French authorities believe the Glavnoje Razvedyvatel’noje Upravlenije (GRU) was behind the cyberattack. This is one of two Russian military intelligence agencies that will be accused of hacking the Democratic National Committee (DNC) in 2015 and 2016. The GRU has been linked to the Fancy Bear or APT 28 hacking group. The Post will also claim that some analysts believe the attack was Russian retaliation against France for backing out of an agreement to sell helicopter carriers to Russia because of Russian aggression in Ukraine. (The Washington Post, 7/24/2016)