Security & Defense

#32026D0588Council Decision (CFSP) 2026/588 amending restrictive measures against cyber-attacks threatening the EU

🇪🇺European Union··Other·High Impact·View source ↗

AI-generated summary for informational purposes only. Not legal advice. See the original source for the authoritative text.

🇬🇧 English

This EU Council Decision adds two Chinese individuals (Chen Cheng and Wu Haibo) and three entities (Integrity Technology Group, Emennet Pasargad, and Anxun Information Technology Co. Ltd. / i-Soon) to the EU cyber sanctions list. The sanctioned parties are linked to hacking-for-hire services, Advanced Persistent Threat (APT) operations including Flax Typhoon, and attacks on critical infrastructure and governments. Anxun/i-Soon targeted Member State critical systems, stole and sold classified data, and attacked third countries. Integrity Technology Group supplied tools used to compromise over 65,600 IoT devices across six EU Member States between 2022-2023. Emennet Pasargad (Iran) conducted attacks on Sweden, France (including Charlie Hebdo and Paris Olympics), and attempted interference in the 2020 US elections.

AI-generated summary. May contain errors. Refer to official sources for legal decisions.

Key Changes

  • Addition of Chen Cheng (DOB 20.10.1984, Yancheng, China) and Wu Haibo as natural persons subject to asset freeze and travel ban
  • Addition of Integrity Technology Group (Beijing, registered 2.9.2010) for supplying tools used in Flax Typhoon attacks compromising 65,600+ IoT devices in 6 Member States (2022-2023)
  • Addition of Iranian company Emennet Pasargad (Tehran, reg. 554267) for attacks on Sweden, France (Charlie Hebdo, Paris Olympics) and 2020 US election interference

+ 3 more changes with Pro

Obligations

What this law requires

high

Freeze all assets and economic resources of the following sanctioned individuals: Chen Cheng (DOB 20.10.1984) and Wu Haibo, preventing any transfer, conversion, or use of their funds and financial assets

Financial institutions, asset managers, and all EU entities holding assets of the named individuals
prohibition
high

Freeze all assets and economic resources of the following sanctioned entities: Integrity Technology Group (Beijing, China), Emennet Pasargad (Tehran, Iran), and Anxun Information Technology Co. Ltd./i-Soon (China), preventing any transfer, conversion, or use of their funds and financial assets

Financial institutions, asset managers, and all EU entities holding assets of the named entities
prohibition
high

Prohibit the supply, sale, or transfer of products, technology, and services from Integrity Technology Group to any EU entity or Member State, including computer network exploitation tools and Internet of Things device access capabilities

All EU importers, distributors, technology companies, and procurement entities
prohibition
high

Prohibit the supply, sale, or transfer of hacking-for-hire services and cyber-attack tools offered by Anxun Information Technology Co. Ltd./i-Soon to any EU entity, government, or critical infrastructure

All EU entities, government agencies, and critical infrastructure operators
prohibition
high

Prohibit all business transactions, contracts, and commercial relationships with Emennet Pasargad (including its aliases: Anzu Team, Holy Souls, Aria Sepehr Ayandehsazan, Haywire Kitten)

All EU companies, financial institutions, and business entities
prohibition

Affected Parties

Chinese cybersecurity companiesIranian cyber actors+3 more…

Tags

cyber sanctions,EU restrictive measures,APT groups