Cyber Threat Actor: Evgeniy Serebriakov

Evgenii Merezhko, also known as Evgenii Mikhaylovich Serebriakov and Evgeniy Serebriakov, is a threat actor linked to the Russian GRU and operates from Russia. The aliases reflect the individuals identified in public attributions of cyber operations conducted by GRU officers. This actor is therefore understood to be part of a state‑sponsored apparatus rather than an independent criminal group. The connection to the GRU provides a clear state nexus that shapes the actor’s resources and strategic direction.

The actor’s targeting has focused on international anti‑doping organizations and sports governing bodies such as FIFA, with the explicit aim of gathering confidential medical records, therapeutic use exemptions and anti‑doping strategies. Strategic objectives described in the attributed incident include espionage to acquire sensitive data and subsequent disinformation campaigns designed to undermine investigations into Russia’s state‑sponsored doping program. Observed tactics, techniques and procedures involve spearphishing messages, close‑access Wi‑Fi compromises during global events, and the creation of false hacktivist personas like the “Fancy Bears’ Hack Team” to leak altered stolen data. The actor also engaged in direct outreach to journalists to amplify fabricated narratives, demonstrating a coordinated influence component alongside the initial intrusion.

The most publicly reported operation associated with this actor occurred in November 2014, when GRU officers executed a cyber espionage campaign against anti‑doping entities and FIFA, weaponizing the stolen information in a broader disinformation effort. This campaign is cited as representative of the actor’s methodology and forms part of a wider pattern of GRU activity targeting organizations deemed strategically important to the Russian government. No additional campaigns or tooling details are specified in the available source material, so the profile remains confined to these confirmed facts.