Notorious Russian Military Hacking Crew Behind October Ransomware Attacks on Ukraine, Poland

The group behind the attacks — tracked by Microsoft’s Threat Intelligence Center as “Iridium” but known widely as “Sandworm” — is the same group that attempted to take out electricity substations and other parts of a grid.