Sandworm
Threat Actor
Sandworm is a very active espionage threat group linked to Russia's GRU (armed forces). The attackers have focused on Ukraine throughout 2023, using phishing lures, Android malware, and data-wipers.
Incidents Associated with this Threat
Malware Used by this Threat Actor
No malware identified for this threat actor.