Loading signal...
Signal
Submitted
Feb 9, 2026, 22:05 UTC
WIRED reveals the story of Sandworm, a notorious Russian hacker group responsible for significant cyberattacks attributed to the Kremlin over several years.
The article by WIRED details the history and operations of Sandworm, a Russian state-sponsored hacking group linked to the Kremlin that has executed some of the most dangerous and destructive cyberattacks in recent years. It explores their methods, targets, and the geopolitical implications of their actions. The piece includes visuals such as a symbolic image of a war game terrain with illuminated red markers representing attacks, and highlights Sandworm’s impact on global cybersecurity. The article also references connections to major cyber incidents, including attacks on critical infrastructure and political entities. It provides context to the group’s motivations tied to Russian state interests and details how cybersecurity experts have unraveled their activities over time.
Confidence: High
The article clearly describes hostile cyber operations by Sandworm, a Kremlin-backed hacking group, targeting critical systems. It is focused on aggressor activity without mention of defensive preparations.
Source URL
https://wired.com/story/sandworm-kremlin-most-dangerous-hackers
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "dcc426cd-9ec7-4841-987b-5f9d9fa6fece",
"url": "https://wired.com/story/sandworm-kremlin-most-dangerous-hackers",
"source": "extension",
"status": "approved",
"category": "Cyber & Information Warfare",
"subcategory": "Cyber Attacks",
"incident_type": "Hacking, malware, ransomware",
"country": "Russian Federation",
"source_reliability": "C",
"info_credibility": "3",
"tags": [
"Sandworm",
"Russian hackers",
"cyberattacks",
"Kremlin",
"cyber warfare",
"malware",
"espionage",
"infrastructure attack"
],
"nodes": [],
"countries": [
"Russian Federation"
],
"where_text": "Cyberspace",
"headline": "The Story of Sandworm, the Kremlin's Most Dangerous Hackers",
"description": "WIRED has published an in-depth report on Sandworm, the Kremlin's notorious hacking group responsible for high-profile cyberattacks. The story outlines the origins of Sandworm, their evolving tactics in cyberwarfare, and their links to the Russian government. The report highlights specific attack campaigns, including infrastructure breaches and disruptive malware operations. Illustrations include a close-up of a strategic game map with red LED lights symbolizing the group's cyber offensive footprint. WIRED has tracked Sandworm’s activities for over three years, documenting their influence on cyber conflict and espionage globally.",
"summary_short": "WIRED reveals the story of Sandworm, a notorious Russian hacker group responsible for significant cyberattacks attributed to the Kremlin over several years.",
"summary_extended": "The article by WIRED details the history and operations of Sandworm, a Russian state-sponsored hacking group linked to the Kremlin that has executed some of the most dangerous and destructive cyberattacks in recent years. It explores their methods, targets, and the geopolitical implications of their actions. The piece includes visuals such as a symbolic image of a war game terrain with illuminated red markers representing attacks, and highlights Sandworm’s impact on global cybersecurity. The article also references connections to major cyber incidents, including attacks on critical infrastructure and political entities. It provides context to the group’s motivations tied to Russian state interests and details how cybersecurity experts have unraveled their activities over time.",
"actor_primary": "Sandworm",
"target_primary": null,
"location_text": "Russian Federation",
"location_region": null,
"location_coordinates_lat": 61.52401,
"location_coordinates_lon": 105.318756,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article clearly describes hostile cyber operations by Sandworm, a Kremlin-backed hacking group, targeting critical systems. It is focused on aggressor activity without mention of defensive preparations.",
"event_time_utc": "2018-01-01T00:00:00.000Z",
"end_time_utc": "2021-12-31T23:59:59.000Z",
"event_time_confidence": "pm24h",
"created_at": "2026-02-09T22:05:00.020Z",
"updated_at": "2026-11-09T06:58:21.434Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "within_24h",
"severity_band": "significant",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
C
Info credibility
3
Event time
Jan 1, 2018, 00:00 UTC
End time
Dec 31, 2021, 23:59 UTC
Event time confidence
pm24h
Location
Russian Federation
Primary actor
Sandworm
Country
Russian Federation
Countries
Russian Federation
Tags
Sandworm, Russian hackers, cyberattacks, Kremlin, cyber warfare, malware, espionage, infrastructure attack
Signal
Submitted
Feb 9, 2026, 22:05 UTC
WIRED reveals the story of Sandworm, a notorious Russian hacker group responsible for significant cyberattacks attributed to the Kremlin over several years.
The article by WIRED details the history and operations of Sandworm, a Russian state-sponsored hacking group linked to the Kremlin that has executed some of the most dangerous and destructive cyberattacks in recent years. It explores their methods, targets, and the geopolitical implications of their actions. The piece includes visuals such as a symbolic image of a war game terrain with illuminated red markers representing attacks, and highlights Sandworm’s impact on global cybersecurity. The article also references connections to major cyber incidents, including attacks on critical infrastructure and political entities. It provides context to the group’s motivations tied to Russian state interests and details how cybersecurity experts have unraveled their activities over time.
Confidence: High
The article clearly describes hostile cyber operations by Sandworm, a Kremlin-backed hacking group, targeting critical systems. It is focused on aggressor activity without mention of defensive preparations.
Source URL
https://wired.com/story/sandworm-kremlin-most-dangerous-hackers
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "dcc426cd-9ec7-4841-987b-5f9d9fa6fece",
"url": "https://wired.com/story/sandworm-kremlin-most-dangerous-hackers",
"source": "extension",
"status": "approved",
"category": "Cyber & Information Warfare",
"subcategory": "Cyber Attacks",
"incident_type": "Hacking, malware, ransomware",
"country": "Russian Federation",
"source_reliability": "C",
"info_credibility": "3",
"tags": [
"Sandworm",
"Russian hackers",
"cyberattacks",
"Kremlin",
"cyber warfare",
"malware",
"espionage",
"infrastructure attack"
],
"nodes": [],
"countries": [
"Russian Federation"
],
"where_text": "Cyberspace",
"headline": "The Story of Sandworm, the Kremlin's Most Dangerous Hackers",
"description": "WIRED has published an in-depth report on Sandworm, the Kremlin's notorious hacking group responsible for high-profile cyberattacks. The story outlines the origins of Sandworm, their evolving tactics in cyberwarfare, and their links to the Russian government. The report highlights specific attack campaigns, including infrastructure breaches and disruptive malware operations. Illustrations include a close-up of a strategic game map with red LED lights symbolizing the group's cyber offensive footprint. WIRED has tracked Sandworm’s activities for over three years, documenting their influence on cyber conflict and espionage globally.",
"summary_short": "WIRED reveals the story of Sandworm, a notorious Russian hacker group responsible for significant cyberattacks attributed to the Kremlin over several years.",
"summary_extended": "The article by WIRED details the history and operations of Sandworm, a Russian state-sponsored hacking group linked to the Kremlin that has executed some of the most dangerous and destructive cyberattacks in recent years. It explores their methods, targets, and the geopolitical implications of their actions. The piece includes visuals such as a symbolic image of a war game terrain with illuminated red markers representing attacks, and highlights Sandworm’s impact on global cybersecurity. The article also references connections to major cyber incidents, including attacks on critical infrastructure and political entities. It provides context to the group’s motivations tied to Russian state interests and details how cybersecurity experts have unraveled their activities over time.",
"actor_primary": "Sandworm",
"target_primary": null,
"location_text": "Russian Federation",
"location_region": null,
"location_coordinates_lat": 61.52401,
"location_coordinates_lon": 105.318756,
"location_precision": "Regional",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article clearly describes hostile cyber operations by Sandworm, a Kremlin-backed hacking group, targeting critical systems. It is focused on aggressor activity without mention of defensive preparations.",
"event_time_utc": "2018-01-01T00:00:00.000Z",
"end_time_utc": "2021-12-31T23:59:59.000Z",
"event_time_confidence": "pm24h",
"created_at": "2026-02-09T22:05:00.020Z",
"updated_at": "2026-11-09T06:58:21.434Z",
"reliability_band": "strong",
"location_precision_band": "regional",
"time_precision_band": "within_24h",
"severity_band": "significant",
"attribution_confidence_band": "high",
"attribution_basis": "single_source"
}Source reliability
C
Info credibility
3
Event time
Jan 1, 2018, 00:00 UTC
End time
Dec 31, 2021, 23:59 UTC
Event time confidence
pm24h
Location
Russian Federation
Primary actor
Sandworm
Country
Russian Federation
Countries
Russian Federation
Tags
Sandworm, Russian hackers, cyberattacks, Kremlin, cyber warfare, malware, espionage, infrastructure attack