apt44-unearthing-sandworm.pdf

Authors

Gabby Roncone, Dan Black, John Wolfram, Tyler McLellan, Nick Simonian,

Ryan Hall, Anton Prokopenkov, Dan Perez, Lexie Aytes, Alden Wahlstrom

Acknowledgements

Collaboration with companies and governments to track and mitigate threats is critical to our collective efforts to defend our networks against adversaries. The efforts of Mandiant Consulting across many incident response engagements in Ukraine since 2022 enabled much of the analysis included in this report. We’d additionally like to thank Mandiant's FLARE team, former Mandiant employees, ESET, Microsoft, Google TAG, numerous global government organizations, and most importantly, all of our partners in Ukraine. Our work would not be possible without t…