Entity record
85th Main Special Service Centre (GTsSS)Organization
85th Main Special Service Centre (GTsSS) appears on the UK Sanctions List (UKSL) and 1 other official sanctions list, designated by UK HM Treasury (OFSI), UK Foreign, Commonwealth & Development Office (FCDO) under programs Cyber, The Cyber (Sanctions) (EU Exit) Regulations 2020; reflected as observed on 2026-06-03.
Also known as
- APT28 (Advanced Persistent Threat)
- FANCY BEAR
- GRU Unit 26165
- Iron Twilight
- Pawn Storm
- Sednit
- Sofacy Group
- STRONTIUM
- Threat Group-4127/Iron Twilight
- Tsar Team
Designations
- Designated by UK HM Treasury (OFSI) under program Cyber since . Other entities under Cyber
- Designated by UK Foreign, Commonwealth & Development Office (FCDO) under program The Cyber (Sanctions) (EU Exit) Regulations 2020 since . Other entities under The Cyber (Sanctions) (EU Exit) Regulations 2020
Reason for listing
Per UK Foreign, Commonwealth & Development Office (FCDO) (listed ):
UKSL CYB0012 — Measures: Asset freeze, Director Disqualification Sanction — The 85th Main Special Services Centre (GTsSS) (Unit 26165) of the Russian General Staff of the Armed Forces of the Russian Federation (GRU), is involved in relevant cyber activity in that it has been responsible for, engaging in, providing support for, or promoting the commission, planning or preparation or relevant cyber activity, including the deployment of X-Agent malware. These activities undermine, or are intended to undermine, the integrity, prosperity or security of the United Kingdom or a country other than the United Kingdom. (official source)
Per UK HM Treasury (OFSI) (listed ):
CYB0012 — The 85th Main Special Services Centre (GTsSS) (Unit 26165) of the Russian General Staff of the Armed Forces of the Russian Federation (GRU), is involved in relevant cyber activity in that it has been responsible for, engaging in, providing support for, or promoting the commission, planning or preparation or relevant cyber activity, including the deployment of X-Agent malware. These activities undermine, or are intended to undermine, the integrity, prosperity or security of the United Kingdom or a country other than the United Kingdom. (official source)
Key properties
- Legal Form
- Department within Government
- Parent
- Russian Ministry of Defence
Identifiers
- OFSI Group ID
- 13984
- UK Sanctions List Unique ID
- CYB0012
Addresses
Komsomol'skiy Prospekt, 20 Moscow, 119146, RussiaSource list & list version
| Source list | List version | Manifest SHA-256 | Status | Verify |
|---|---|---|---|---|
| UK Sanctions List (UKSL)Sanctions list UK Foreign, Commonwealth & Development Office (FCDO) | gb_fcdo_uksl@2026-08-04 | 6f5e8b8ed92cccf0… | List version (signing pending) | — |
| UK OFSI Consolidated List of Financial Sanctions TargetsSanctions list UK HM Treasury — Office of Financial Sanctions Implementation (OFSI) | 20260610-001 | 4d14d0d8a5584fff… | List version (signing pending) | manifest |
About these sources
The UK Sanctions List (UKSL), published by the Foreign, Commonwealth & Development Office — since 28 January 2026 the single, current source for all UK sanctions designations (financial, immigration, trade and transport measures), superseding the older OFSI Consolidated List.
What a match means: A match is a current, binding UK sanctions designation — treat as a direct compliance hit and escalate immediately.
The UK's former OFSI Consolidated List of Financial Sanctions Targets, maintained by HM Treasury. OFSI closed this list on 28 January 2026 — current UK sanctions designations now publish only to the FCDO UK Sanctions List (also in this catalog) — and it is retained here as a historical source.
What a match means: A match reflects a UK financial-sanctions designation recorded before the 28 Jan 2026 cutover; check whether the same party also appears on the current UK Sanctions List, and treat either appearance as a genuine UK sanctions hit, not a stale false positive.
First observed ; last confirmed present in UK Sanctions List (UKSL) list version gb_fcdo_uksl@2026-08-04, observed .
This page reflects the official UK Sanctions List (UKSL), version gb_fcdo_uksl@2026-08-04, as observed on 2026-06-03. ProofAML is not the issuing authority.
Request a correction or dispute (distinguishes a data-handling error on our side from the underlying official designation, which is the issuing authority's record).
How to cite this page
85th Main Special Service Centre (GTsSS). ProofAML. This page reflects the official UK Sanctions List (UKSL), version gb_fcdo_uksl@2026-08-04, as observed on 2026-06-03. ProofAML is not the issuing authority. URL: https://proofaml.com/organizations/85th-main-special-service-centre-gtsss-nkaa8202da/
Machine-readable export (FTM + lineage): /data/entities/aa.json (record key nkaa8202da)