CyberSecurityBoardThreat Intel · CVEs · Products
Attack Groups

Sandworm: Russian GRU-Linked Cyber Espionage Group

June 26, 2026

Sandworm, also known as APT44, Seashell Blizzard, and UAC-0002, is a sophisticated hacking group affiliated with the GRU, Russia's military intelligence agency. It has been linked to numerous high-profile cyberattacks, including those targeting Ukraine's critical infrastructure. In this campaign, Sandworm is associated with the UAC-0145 cluster, which uses fake job interviews to deliver malware.