The Sandworm group, a Russian military cyber-espionage unit, is actively targeting Windows users in Ukraine. They are distributing trojanized versions of Microsoft Key Management Service (KMS) activators and fake Windows updates to compromise systems. This campaign highlights the ongoing cyber warfare efforts by Russian actors and the potential risks associated with using unofficial activation tools.