Sandworm

Threat Actor

Sandworm is a very active espionage threat group linked to Russia's GRU (armed forces). The attackers have focused on Ukraine throughout 2023, using phishing lures, Android malware, and data-wipers.

Incidents Associated with this Threat

Malware Used by this Threat Actor

No malware identified for this threat actor.