Russian Seashell Blizzard Enlists Specialist Initial Access Subgroup tInfosecurity Magazine·Feb 13, 12:00 UTC · Feb 13, 2025Vulnerability55
Sandworm APT's initial access subgroup hits organizations accross the globeHelp Net Security·Feb 13, 00:00 UTC · Feb 13, 2025Threat actorCVE-2021-34473CVE-2022-41352CVE-2023-32315+4 CVEs160
Microsoft Uncovers Sandworm Subgroup's Global Cyber Attacks Spanning 15+ CountriesThe Hacker News·Feb 15, 00:00 UTC · Feb 15, 2025Threat actorCVE-2024-1709CVE-2023-48788CVE-2021-34473+4 CVEs160
Russian state threat group shifts focus to US, UK targetsCyberScoop·Feb 12, 17:58 UTC · Feb 12, 2025Exploit / PoC in the wildCVE-2024-1709CVE-2023-48788CVE-2021-34473+4 CVEs160
Subgroup of Russia’s Sandworm compromising US and European organizations, Microsoft saysThe Record·Feb 12, 18:22 UTC · Feb 12, 2025Threat actorCVE-2024-1709CVE-2023-48788CVE-2021-34473+4 CVEs160
Russian SVR-Linked APT29 Targets JetBrains TeamCity Servers in Ongoing AttacksThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2023Threat actor in the wildCVE-2023-4279360
New Russian State Hacking Group Hits Europe and North AmericaInfosecurity Magazine·May 28, 09:15 UTC · May 28, 2025Threat actor160
Russian APT Groups Intensify Attacks in Europe with ZeroInfosecurity Magazine·May 20, 15:15 UTC · May 20, 2025Threat actorCVE-2024-11182CVE-2024-9680CVE-2024-49039160
Google TAG Warns of Russian Hackers Conducting Phishing Attacks in UkraineThe Hacker News·Apr 21, 04:54 UTC · Apr 21, 2023Phishing & fraud55
Russian hacking campaign targets rights groups, media, former US ambassadorCyberScoop·Aug 14, 12:57 UTC · Aug 14, 2024Threat actor in the wild60
Russian military hackers pose as recruiters to target Ukrainian IT workersThe Record·Aug 10, 15:24 UTC · Aug 10, 2026Threat actor60
Russia-Aligned ELECTRUM Tied to December 2025 Cyber Attack on Polish Power GridThe Hacker News·Jan 31, 06:35 UTC · Jan 31, 2026Data breach60
Wiper Attack on Polish Power Grid Linked to Russia’s SandwormInfosecurity Magazine·Jan 26, 10:55 UTC · Jan 26, 2026Malware55
Poland repels data-wiping malware attack on energy systemsHelp Net Security·Jan 26, 00:00 UTC · Jan 26, 2026Malware55
Amazon Exposes Years-Long GRU Cyber Campaign Targeting Energy and Cloud InfrastructureThe Hacker News·Dec 17, 03:59 UTC · Dec 17, 2025Threat actorCVE-2022-26318CVE-2021-26084CVE-2023-22518+1 CVEs60
Russia’s GRU hackers targeting misconfigured network edge devices in attacks on energy sector, Amazon saysThe Record·Dec 16, 21:50 UTC · Dec 16, 2025Exploit / PoCCVE-2022-26318CVE-2021-26084CVE-2023-22518+1 CVEs60
Amazon warns that Russia’s Sandworm has shifted its tacticsCyberScoop·Dec 16, 15:54 UTC · Dec 16, 2025Threat actor in the wildCVE-2022-26318CVE-2021-26084CVE-2023-22518+1 CVEs60
Amazon Warns Russian GRU Hackers Target Western Firms via Edge DevicesInfosecurity Magazine·Dec 16, 12:15 UTC · Dec 16, 2025VulnerabilityCVE-2022-26318CVE-2021-26084CVE-2023-22518+1 CVEs60
Russian Hacking Group Sandworm Deploys New Wiper Malware in UkraineInfosecurity Magazine·Nov 7, 12:20 UTC · Nov 7, 2025Malware55
CISA Denies Reports of Shift in Posture Amid Russian ThreatsInfosecurity Magazine·Mar 3, 14:45 UTC · Mar 3, 2025Vulnerability55
Ukraine Targeted in Cyberattack Exploiting 7-YearThe Hacker News·Apr 29, 02:58 UTC · Apr 29, 2024VulnerabilityCVE-2017-857060
Russian hackers target 20 energy facilities in Ukraine amid intense missile strikesThe Record·Apr 23, 14:33 UTC · Apr 23, 2024Ransomware60
Russia’s Sandworm Upgraded to APT44 by Google's MandiantInfosecurity Magazine·Apr 18, 17:15 UTC · Apr 18, 2024Threat actor160
CEO of Ukraine's largest telecom operator describes Russian cyberattack that wiped thousands of computersThe Record·Feb 9, 17:01 UTC · Feb 9, 2024Exploit / PoC60