Sandworm

Sandworm Team is a destructive threat group attributed to Russia's GRU military unit 74455. Active since at least 2009, it has conducted cyber operations such as attacks on Ukrainian electrical companies, the NotPetya ransomware campaign, and the Olympic Destroyer attack. The group has also targeted the French presidential campaign, the Organisation for the Prohibition of Chemical Weapons, and Georgia. Its activities are often linked to GRU Unit 26165, also known as APT28.