Sandworm Team
ELECTRUMTelebotsIRON VIKINGBlackEnergy (Group)QuedaghVoodoo BearIRIDIUMSeashell BlizzardFROZENBARENTSAPT44
RussiaGRU Unit 74455 (Russian military intelligence)
Sandworm Team is a destructive threat group that has been attributed to Russia's General Staff Main Intelligence Directorate (GRU) Main Center for Special Technologies (GTsST) military unit 74455. This group has been active since at least 2009.
MITRE ATT&CK Techniques
T1003.001T1003.003T1005T1018T1021.002T1027T1027.010T1033T1036T1036.005T1040T1041T1047T1049T1053.005T1056.001T1059.001T1059.005T1070.004T1071.001T1072T1078T1078.002T1082T1083T1087.002T1087.003T1090T1102.002T1105T1106T1132.001T1133T1140T1190T1195T1195.002T1199T1203T1204.001T1204.002T1213.006T1218.011T1219T1485T1486T1489T1490T1491.002T1499T1505.003T1539T1555.003T1561.002T1566.001T1566.002T1570T1571T1583T1583.001T1583.004T1584.004T1584.005T1585.001T1585.002T1586.001T1587.001T1588.002T1588.006T1589.002T1589.003T1590.001T1591.002T1592.002T1593T1594T1595.002T1598.003T1608.001
Associated Malware
AcidPourAcidRainBad RabbitBlackEnergyCobalt StrikeCyclops BlinkEmpireExaramel for LinuxExaramel for WindowsGreyEnergyImpacketIndustroyerIndustroyer2Invoke-PSImageKapekaKillDiskMimikatzNeo-reGeorgNetNotPetyaOlympic DestroyerP.A.S. WebshellPoshC2PrestigePsExecSDeleteVPNFilter
No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.