Classic Brechas Mapa Actores TTP Matrix Analitica Alertas CyberNews Arsenal Exploits KillChain Origen SSLBL RansomLook Ransomwhere

Sandworm Team

0 incidentes 0 paises 0 sectores threat-actor Ultimo: -

Aliases: ELECTRUM, Telebots, IRON VIKING, BlackEnergy (Group), Quedagh, Voodoo Bear, IRIDIUM, Seashell Blizzard, FROZENBARENTS, APT44, TEMP

Ver en IntelTracker → APTTrail →

Sandworm Team is a destructive threat group that has been attributed to Russia's General Staff Main Intelligence Directorate (GRU) Main Center for Special Technologies (GTsST) military unit 74455. This group has been active since at least 2009.In October 2020, the US indicted six GRU Unit 74455 officers associated with Sandworm Team for the following cyber operations: the 2015 and 2016 attacks against Ukrainian electrical companies and government organizations, the 2017 worldwide NotPetya attack, targeting of the 2017 French presidential campaign, the 2018 Olympic Destroyer attack against the Winter Olympic Games, the 2018 operation against the Organisation for the Prohibition of Chemical Weapons, and attacks against the country of Georgia in 2018 and 2019. Some of these were conducted with the assistance of GRU Unit 26165, which is also referred to as APT28.

Aliases del actor

ELECTRUM Telebots IRON VIKING BlackEnergy (Group)Quedagh Voodoo Bear IRIDIUM Seashell Blizzard FROZENBARENTS APT44 TEMP

Actores similares

energetic-bearactor · 1 ember-bearactor · 1 apt-1877teamactor · 1 apt-cadetblizzardactor · 1 apt-equationgroupactor · 1 apt-group5actor · 1 apt-hackingteamactor · 1 apt-irontigeractor · 1 apt-noisybearactor · 1 apt-telebotsactor · 1

Canales, DLS e infraestructura asociada

Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.

Tipo	Estado	Host / enlace	Title / ultimo titulo
Web	unknown	attack.mitre.org	OSINT

Tipo

threat-actor

Pais origen

Motivacion

Impacto

Actualizado

2026-08-03