A year of wipers: How the Kremlin-backed Sandworm has attacked Ukraine during the warThe Record·Mar 8, 16:55 UTC · Mar 8, 2023Malware42
Russia’s Sandworm Upgraded to APT44 by Google's MandiantInfosecurity Magazine·Apr 18, 17:15 UTC · Apr 18, 2024Threat actor160
Sandworm hackers play ‘central role’ in Russia’s cyberwar with UkraineThe Record·Apr 17, 15:21 UTC · Apr 17, 2024Threat actor45
Russian hackers disrupted Ukrainian electrical grid last yearCyberScoop·Nov 9, 15:31 UTC · Nov 9, 2023Malware55
Russia-linked Sandworm APT implicated in major cyber attack on Poland’s power gridSecurity Affairs·Jan 26, 08:09 UTC · Jan 26, 2026Threat actor60
iSight Partners - Sandworm is involved Ukrainian power outageSecurity Affairs·May 24, 06:58 UTC · May 24, 2018Threat actorCVE-2013-390660
Mandiant: Notorious Russian hacking unit linked to breach of Texas water facilityCyberScoop·Apr 17, 16:48 UTC · Apr 17, 2024Ransomware in the wild60
Ukraine energy facility took unique Sandworm hit on day of missile strikes, report saysThe Record·Nov 9, 16:06 UTC · Nov 9, 2023Threat actor60
Sandworm hackers incapacitated Ukrainian power grid amid missile strikeHelp Net Security·Nov 9, 00:00 UTC · Nov 9, 2023Threat actor60
Previously unknown Kapeka backdoor linked to Sandworm APTSecurity Affairs·Apr 18, 09:46 UTC · Apr 18, 2024Malware42
Russian APT Sandworm Disrupted Power in Ukraine Using OT TechniquesInfosecurity Magazine·Nov 9, 08:00 UTC · Nov 9, 2023Threat actor60
Russia-linked Sandworm reportedly has retooled with 'Cyclops Blink'CyberScoop·Feb 23, 17:32 UTC · Feb 23, 2022Ransomware in the wild60
SandWorm hacking team exploited 0Security Affairs·Mar 22, 22:02 UTC · Mar 22, 2019Threat actorCVE-2014-4114CVE-2013-390660
Wiper Attack on Polish Power Grid Linked to Russia’s SandwormInfosecurity Magazine·Jan 26, 10:55 UTC · Jan 26, 2026Malware55
New DynoWiper Malware Used in Attempted Sandworm Attack on Polish Power SectorThe Hacker News·Jan 26, 06:16 UTC · Jan 26, 2026Malware55
Microsoft Uncovers Sandworm Subgroup's Global Cyber Attacks Spanning 15+ CountriesThe Hacker News·Feb 15, 00:00 UTC · Feb 15, 2025Threat actorCVE-2024-1709CVE-2023-48788CVE-2021-34473+4 CVEs60
Russian Sandworm Group Using Novel Backdoor to Target UkraineInfosecurity Magazine·Apr 17, 08:01 UTC · Apr 17, 2024Malware55
Sandworm probably wasn’t behind Danish critical infrastructure cyberattack, report saysCyberScoop·Jan 11, 22:44 UTC · Jan 11, 2024Threat actor in the wild60
Sandworm Linked to Attack on Danish Critical InfrastructureInfosecurity Magazine·Nov 16, 14:00 UTC · Nov 16, 2023Threat actorCVE-2023-28771CVE-2023-33009CVE-2023-3301060
Russian Sandworm disrupts power in Ukraine with a new OT attackSecurity Affairs·Nov 9, 18:58 UTC · Nov 9, 2023Threat actor60
Russia-linked Sandworm APT compromised 11 Ukrainian telecommunications providersSecurity Affairs·Nov 9, 18:56 UTC · Nov 9, 2023Threat actor57
Cyclops Blink malware linked to Russia's Sandworm APTSecurity Affairs·Apr 6, 21:41 UTC · Apr 6, 2022Ransomware57
France agency ANSSI links Sandworm APT to attacks on hosting providersSecurity Affairs·Feb 17, 12:14 UTC · Feb 17, 2021Threat actor57
Russia’s Sandworm hackers deploying wipers against Ukraine’s grain industryThe Record·Nov 6, 12:55 UTC · Nov 6, 2025Malware30
Russian hackers, likely linked to Sandworm, exploit legitimate tools against Ukrainian targetsSecurity Affairs·Oct 29, 14:56 UTC · Oct 29, 2025Threat actor57
Subgroup of Russia’s Sandworm compromising US and European organizations, Microsoft saysThe Record·Feb 12, 18:22 UTC · Feb 12, 2025Threat actorCVE-2024-1709CVE-2023-48788CVE-2021-34473+4 CVEs60
Sandworm-linked hackers target users of Ukraine’s military app in new spying campaignThe Record·Dec 19, 13:11 UTC · Dec 19, 2024Threat actor60
Ukraine Blames Russian Sandworm Hackers for Kyivstar AttackInfosecurity Magazine·Jan 4, 16:15 UTC · Jan 4, 2024Threat actor60
Russian Hackers Sandworm Cause Power Outage in Ukraine Amidst Missile StrikesThe Hacker News·Nov 10, 14:43 UTC · Nov 10, 2023Threat actor60
Russia's Sandworm hackers blamed in fresh Ukraine malware attackCyberScoop·Jan 27, 17:03 UTC · Jan 27, 2023Malware in the wild60
Russian Sandworm APT impersonates Ukrainian telcos to deliver malwareSecurity Affairs·Sep 20, 20:49 UTC · Sep 20, 2022Malware42
US charges Sandworm hackers who mounted NotPetya, other high-profile attacksHelp Net Security·Oct 20, 00:00 UTC · Oct 20, 2020Threat actor60
Sandworm hackers have a CAPTCHA trick for UkrainiansThe Record·Jul 16, 13:54 UTC · Jul 16, 2026Threat actor57
Sandworm APT's initial access subgroup hits organizations accross the globeHelp Net Security·Feb 13, 00:00 UTC · Feb 13, 2025Threat actorCVE-2021-34473CVE-2022-41352CVE-2023-32315+4 CVEs60
Leaked documents from Russian firm NTC Vulkan show Sandworm cyberwarfare arsenalSecurity Affairs·Apr 2, 14:40 UTC · Apr 2, 2023Threat actor60
Sandworm hacking group linked to new ransomware deployed in UkraineThe Record·Jan 9, 00:00 UTC · Jan 9, 2023Ransomware60
Russia-linked Sandworm continues to conduct attacks against UkraineSecurity Affairs·May 23, 18:19 UTC · May 23, 2022Threat actor57
US offers $10 million reward for info to locate six Sandworm membersSecurity Affairs·Apr 27, 14:32 UTC · Apr 27, 2022Threat actor60
NSA warns about Sandworm APT exploiting Exim flawHelp Net Security·May 5, 07:53 UTC · May 5, 2021Threat actorCVE-2019-1014960