Sandworm
Also known as GRU Unit 74455, Voodoo Bear, Telebots
A Russian military intelligence unit, charged by the US with NotPetya and the attacks that blacked out parts of Ukraine's power grid. Included here because NotPetya posed as ransomware and remains the costliest outage on record.
- What it is
- State-sponsored
- Based
- Russia (GRU), per US prosecutors
- Active
- 2009–
- Status
- Active; officers indicted
On the record
Oct 2020 · US Department of Justice
Six GRU officers are charged over NotPetya, the Ukrainian blackouts and the Olympic Destroyer attack
In the ledger
One outage listed
- Jun 2017NotPetya: Nearly $1 billion. US prosecutors' figure for losses at three US victims alone; Maersk put its own cost near $300 million.
