Sandworm also known as Unit 74455, is allegedly a Russian cybermilitary unit of the GRU, the organization in charge of Russian military intelligence. Other names, given by cybersecurity researchers, include Telebots, Voodoo Bear, and Iron Viking.
The team is believed to be behind the December 2015 Ukraine power grid cyberattack, the 2017 cyberattacks on Ukraine using the Petya malware, various interference efforts in the 2017 French presidential election, and the cyberattack on the 2018 Winter Olympics opening ceremony. Then-United States Attorney for the Western District of Pennsylvania Scott Brady described the group’s cyber campaign as “representing the most destructive and costly cyber-attacks in history.”
—Wikipedia, “Sandworm (hacker group)”
See also in Internet Salmagundi: “Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin’s Most Dangerous Hackers” for a definitive discussion of the subject.
The attack was the first in five years to use Sandworm’s Industroyer malware, which is designed to automatically trigger power disruptions.
Russia’s Sandworm Hackers Attempted a Third Blackout in Ukraine Read More
The Biden White House is using “all of the levers of national power” to counter—or preempt—cyberattacks by Russia’s most dangerous hacker groups.
How Russia’s Invasion Triggered a US Crackdown on Its Hackers Read More
Western intelligence services are raising alarms about Cyclops Blink, the latest tool at the notorious group’s disposal.
Russia’s Sandworm Hackers Have Built a Botnet of Firewalls Read More
From Wired senior writer Andy Greenberg comes the true story of the most devastating cyberattack in history and the desperate hunt to identify and track the elite Russian agents behind it.
Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin’s Most Dangerous Hackers Read More