FreeCivilian is a likely Russian GRU-linked data extortion group targeting Ukrainian government websites.
FreeCivilian is a data extortion group with suspected ties to Russian GRU military intelligence. They primarily target Ukrainian government websites, including those providing surrender guidance to Russian troops. Their operations blend cybercrime tactics with state-aligned political objectives. Defenders should prioritize monitoring for ransomware and data leak operations aimed at government entities.
FreeCivilian is a data extortion group with suspected ties to Russian GRU military intelligence, known for targeting Ukrainian government websites — including sites offering surrender guidance to Russian troops — blending cybercrime with apparent state-aligned political objectives.
FreeCivilian primarily targets Ukrainian government websites, including those providing surrender guidance to Russian troops.
They employ tactics that blend cybercrime with state-aligned political objectives and are suspected to have ties to Russian GRU military intelligence.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.