State agencyConfirmed
GRU Unit 74455 (Sandworm)
Sandworm · Unit 74455 · Voodoo Bear · Iridium · GTsST
A unit of Russia's military intelligence (GRU), tracked by researchers as Sandworm, responsible for some of the most destructive state cyber operations on record — the 2015–2016 attacks on Ukraine's power grid, the 2017 NotPetya worm, and the 2018 Olympic Destroyer. In October 2020 the United States indicted six of its officers, including for the April–May 2017 hack-and-leak against Emmanuel Macron's En Marche campaign.
Operations
Elections
Evidence Library
IndictmentU.S. Department of JusticeOctober 19, 2020
Six Russian GRU Officers Charged in Connection with Worldwide Deployment of Destructive Malware and Other Disruptive Actions in CyberspaceOriginalArchive pending
IndictmentU.S. Department of JusticeOctober 19, 2020
Six Russian GRU Officers Charged in Connection with Worldwide Deployment of Destructive Malware and Other Disruptive Actions in CyberspaceOriginalArchive pending