EU sanctions Chinese, Iranian entities over cyber-attacks

The European Council on March 16 adopted new restrictive measures against three entities and two individuals accused of carrying out cyber-attacks targeting EU member states and international partners.

The Council sanctioned Integrity Technology Group, a China-based company alleged to have routinely supplied tools used to compromise devices across Europe and globally. According to the EU, between 2022 and 2023, technical and material support linked to the company enabled the hacking of more than 65,000 devices across six member states, Caliber.Az reports, citing the Council.

Anxun Information Technology, also based in China, was listed for allegedly providing hacking services aimed at critical infrastructure and essential state functions in EU countries and third states. Two Chinese nationals, identified as co-founders of the company, were also added to the sanctions list for their alleged involvement in cyber-attacks affecting EU member states.

The Council additionally sanctioned the Iranian company Emennet Pasargad. EU officials said the firm unlawfully accessed a French subscriber database and offered the data for sale on the dark web. The company was also accused of compromising digital advertising billboards to spread disinformation during the 2024 Paris Olympic Games, as well as breaching a Swedish SMS service, impacting a large number of EU citizens.

Those listed under the EU’s cyber sanctions regime are subject to asset freezes, and EU individuals and companies are prohibited from providing them with funds or economic resources. The two individuals also face travel bans, preventing them from entering or transiting through EU territory.

With the latest designations, the EU’s horizontal cyber sanctions regime now applies to 19 individuals and seven entities.

By Sabina Mammadli