Sandworm is a notorious Russian cyber-espionage group, believed to be affiliated with Russian military intelligence (GRU). Active since at least 2009, Sandworm is responsible for high-profile cyberattacks targeting Ukraine, the United States, and other countries. Their operations include disruptive attacks on critical infrastructure, such as the Ukrainian power grid, as well as espionage campaigns using advanced malware like NotPetya. Sandworm is known for its stealth, sophisticated tactics, and focus on causing widespread disruption and gathering intelligence.