ELECTRUM is a highly capable Russian state-sponsored threat actor, also widely recognized by aliases such as Sandworm, APT44, TeleBots, and Seashell Blizzard, that has been active since at least 2009. The group is attributed to Unit 74455 of the Russian General Staff Main Intelligence Directorate (GRU) and is primarily motivated by strategic disruption and espionage in alignment with Russian geopolitical objectives. Initially focused on stealthy espionage in Ukraine and Eastern Europe, ELECTRUM evolved to conduct some of the most destructive cyberattacks recorded, notably the 2017 NotPetya wiper attack and repeated targeting of Ukrainian critical infrastructure, including power grids. This group is distinguished by its unique ability to integrate cyber operations with kinetic warfare, delivering impactful physical-world consequences through cyberattacks.