Corporate Threat Intelligence Unit
Appears in 1 story
Active, tracking GRU operations since 2021
From 2021 to 2025, Amazon exposed that Sandworm (GRU Unit 74455)—the team behind NotPetya and Ukraine's grid attacks—had shifted to infiltrating misconfigured devices at Western utilities, energy companies, and security providers. They compromised edge devices, harvested credentials, and penetrated networks across North America and Europe.
Updated May 16
No stories match your search
Try a different keyword
How would you like to describe your experience with the app today?
