Uptime Hamster: 112d 15h 54mDeploy: 23 Oct 2026 07:21Updated: 2026-07-21
Logo del actor de amenaza ELECTRUM

ELECTRUM

0 incidentes 0 paises 0 sectores apt RU Ultimo: -
Aliases: APT44, Blue Echidna, Sandworm, FROZENBARENTS, G0034, IRIDIUM, IRON VIKING, Quedagh, Seashell Blizzard, TEMP.Noble, TeleBots, UAC-0082, UAC-0113, VOODOO BEAR, Sandworm Team, TEMP
Ver en IntelTracker → APTTrail →
ELECTRUM is a highly capable Russian state-sponsored threat actor, also widely recognized by aliases such as Sandworm, APT44, TeleBots, and Seashell Blizzard, that has been active since at least 2009. The group is attributed to Unit 74455 of the Russian General Staff Main Intelligence Directorate (GRU) and is primarily motivated by strategic disruption and espionage in alignment with Russian geopolitical objectives. Initially focused on stealthy espionage in Ukraine and Eastern Europe, ELECTRUM evolved to conduct some of the most destructive cyberattacks recorded, notably the 2017 NotPetya wiper attack and repeated targeting of Ukrainian critical infrastructure, including power grids. This group is distinguished by its unique ability to integrate cyber operations with kinetic warfare, delivering impactful physical-world consequences through cyberattacks.

Aliases del actor

APT44Blue EchidnaSandwormFROZENBARENTSG0034IRIDIUMIRON VIKINGQuedaghSeashell BlizzardTEMP.NobleTeleBotsUAC-0082UAC-0113VOODOO BEARSandworm TeamTEMP

Actores similares

apt-tempperiscopeactor · 1apt-temptingcedaractor · 1Sandworm (APT44)actor · 1Sandworm Teamthreat-actor · 0energetic-bearactor · 1ember-bearactor · 1apt-1877teamactor · 1apt-blueprintactor · 1apt-cadetblizzardactor · 1apt-hackingteamactor · 1
Motivacion
Information theft and espionage, Sabotage and destruction
Malware asociado
CaddyWiper, win.arguepatch, win.credraptor, P.A.S. Webshell, win.grey_energy, win.roar_bat
Tecnicas MITRE
T1003 - OS Credential Dumping, T1598, T1594, T1078, T1587, T1130
CVEs relacionadas
CVE-2026-24858, CVE-2025-8088, CVE-2025-64328, CVE-2025-59719, CVE-2025-59718, CVE-2025-55182
Tipo
apt
Pais origen
RU
Motivacion
Information theft and espionage, Sabotage and destruction
Impacto
90
Actualizado
Sat, 25 Ma

Paises objetivo (OSINT)

Ukraine

Sectores objetivo (OSINT)

MiningTransportation&WarehousingFinancePublic AdministrationElectrical&Electronical ManufacturingRail TransportationAir TransportationManufacturingOil & GasEducational Services