What other aliases and vendor names is Sandworm Team known by?

Sandworm Team is tracked across the cybersecurity industry by multiple aliases, including: APT44, BlackEnergy (Group), ELECTRUM, FROZENBARENTS, G0034, IRIDIUM, IRON VIKING, Quedagh.

What vulnerabilities and CVEs does Sandworm Team actively exploit?

Sandworm Team has been observed weaponizing vulnerabilities including CVE-2024-1709.

Sandworm Team

Q: What are the primary motivations and sponsors of Sandworm Team?

Sandworm Team operates from Russia with primary motivation categorized as Strategic sabotage, geopolitical disruption, and direct military support for Russian state objectives., sponsored or affiliated with Russia (GRU / Unit 74455).

ACTIVE CAMPAIGN TRACKED ⚠ Critical Threat Russia

Primary Aliases: APT44 Seashell Blizzard Voodoo Bear BlackEnergy (Group)

Sponsor / State Affiliation Russia (GRU / Unit 74455)

Primary Motivation Strategic sabotage, geopolitical disruption, and direct military support for Russian state objectives.

Active Timeline Unknown – Present

Confidence Rating 95% (Grounded)

BadPilot Campaign, Poland Power Grid Attack, Global OT/ICS Disruption Campaign

⚔️ Weaponized CVE Matrix (1)

CVE-2024-1709

Weaponized Vulnerability

CVSS 8.5 KEV EPSS 85.0%

🎯 Target Sectors & Focus

Energy Water and Wastewater Telecommunications Transportation Manufacturing Government NATO Member States Military Oil and Gas Shipping Arms Manufacturing