Main Intelligence Agency of the General Staff of the Armed Forces of the Russian Federation

The Main Intelligence Agency of the General Staff of the Armed Forces of the Russian Federation, commonly known by its Russian acronym GRU or its full title Glavnoe Razvedyvatel'noe Upravlenie, is the foreign military intelligence service of Russia. It operates under the General Staff of the Armed Forces and is tasked with gathering intelligence on foreign militaries, governments and non‑state actors that could affect Russian national security. Its activities include human intelligence collection, signals intelligence, imagery intelligence and cyber espionage, often conducted through dedicated directorates and specialized units. The GRU also oversees special forces formations known as Spetsnaz GRU, which are employed for direct action, reconnaissance and unconventional warfare missions abroad. While the agency’s primary focus is military intelligence, its remit frequently overlaps with political influence operations, reflecting the broader strategic objectives of the Russian state.

Distinguishing attributes of the GRU include its direct subordination to the General Staff rather than to civilian intelligence ministries, which gives it a unique position within Russia’s security architecture. The agency is known for maintaining cyber units that have been linked to advanced persistent threat groups such as APT28 (Fancy Bear), which have conducted operations targeting foreign governments, political organisations and critical infrastructure. Notable publicly attributed actions include interference in the 2016 United States elections and the 2018 Salisbury poisoning of former GRU officer Sergei Skripal and his daughter. Structurally, the GRU remains a constituent part of the Russian Armed Forces, reporting ultimately to the Minister of Defence through the Chief of the General Staff. The May 2022 leak of internal data by the hacktivist group #AgainstTheWest highlighted vulnerabilities within the agency’s information security, demonstrating that even a highly classified military intelligence service can be exposed to external cyber threats. This incident underscores the ongoing challenges the GRU faces in protecting its operational secrets amid an increasingly contested cyber environment.