GRU Cyber and Physical Operations Target U.S. National Security Amid Rising Tensions

Russian interference in the U.S. is primarily conducted through cyber operations and information warfare, with the GRU identified as a key actor targeting American democratic institutions. Unlike in Europe, where physical sabotage is more common, the U.S. faces asymmetric threats, including cyberattacks on utilities and disinformation campaigns.

Notable incidents include a fire at the Scranton Army Ammunition Plant on April 15, 2024, linked to military aid for Ukraine, and various bomb threats during the 2024 elections, attributed to Russian sources. In July 2024, a significant incendiary plot aimed at U.S.-bound flights was thwarted.

The GRU has also executed high-profile cyber operations, including the 2016 DNC hack. While U.S. responses have included indictments and enhanced cybersecurity measures, vulnerabilities persist, particularly in election infrastructure. Experts predict the GRU's operations will continue to evolve, necessitating ongoing adaptation of U.S. defenses.