The second suspect in the Salisbury poisoning case was a doctor and highly decorated Russian military intelligence officer, an investigative website says.
Bellingcat said it used a combination of online material and leaked documents to identify Alexander Mishkin, 39, as someone linked to the attack in March.
It said President Vladimir Putin had presented him with the Hero of the Russian Federation award in 2014.
When asked about the naming of Mr Mishkin, the Kremlin would not comment.
Last month, Bellingcat named the first suspect as Anatoliy Chepiga, a claim also rejected by Russia.
At a news conference in the Houses of Parliament on Tuesday, Bellingcat investigator Cristo Grozev said Mr Mishkin – like Mr Chepiga – was a member of the GRU and given the celebrated award for “actions in Ukraine”.
He said Mr Mishkin’s grandmother has a photograph, that has “been seen by everybody in the village” of President Putin shaking his hand and giving him the award.
The BBC has contacted two people who knew Mr Mishkin as a child in Loyga in the north of Russia, and they confirmed from photographs that he was the man seen in images released by police after the Salisbury attack in March.
Bellingcat, a UK-based website, said both Mr Mishkin’s real passport and the false passport he travelled to the UK on in the name of Alexander Petrov carried the same date of birth.
Outlining in detail how it identified the Salisbury suspect as Mr Mishkin, Bellingcat claims he was recruited by Russian intelligence while completing his medical studies, and made several trips to Ukraine, including during the 2013 unrest.
London’s Metropolitan Police and the Crown Prosecution Service said last month that there was enough evidence to charge Mr Mishkin and Mr Chepiga with attempted murder.
Detectives said the pair arrived in the UK using passports bearing the names Alexander Petrov and Ruslan Boshirov on 2 March, although they had said it was likely the men were travelling under aliases.
By Gordon Corera, BBC security correspondent
It took longer for investigators at the Bellingcat website to identify Alexander Mishkin as he has an even sparser digital footprint than the first man to be named, Anatoly Chepiga.
But using databases and passport details they concluded that this was the real name of the man who came to Salisbury as Alexander Petrov.
Facial recognition experts were asked to examine two photos 15 years apart and use techniques of simulated age progression to establish the match.
Last Thursday, four GRU officers were exposed for trying to hack into communications of the Organisation for the Prohibition of Chemical Weapons in the Netherlands at the time it was investigating the Salisbury poisoning.
Mishkin’s identification will raise more questions about how easy it has been to expose supposedly undercover intelligence officers and undermine Russia’s official account that the two men who came to Salisbury were there to see the Cathedral spire.
Recent reports in the Russian media suggest that Vladimir Putin – himself a former spy chief – is unhappy with the GRU’s performance – and that a purge could be on the way.
Former GRU officer Sergei Skripal – who sold secrets to MI6 – and his daughter Yulia survived being poisoned with Novichok on 4 March.
The suspects are alleged to have smeared the nerve agent on a door handle of his home in Salisbury.
The attack left Mr Skripal and his daughter Yulia critically ill, but Dawn Sturgess, 44, was later exposed to the same nerve agent and died in hospital.
The event sparked a series of accusations and denials between the UK and Russian governments, culminating in diplomatic expulsions and international sanctions.