Sandworm Briefing Deck

The Sandworm Campaign is a Russian cyber espionage operation that exploited a Windows zero-day (CVE-2014-4114) to spear-phish and compromise targets across NATO, the EU, Ukraine, and critical sectors like energy and telecom, with ties to the BlackEnergy family and attribution to the Sandworm Team. The report outlines the campaign timeline from 2009 through 2014, notable targets, coordination with Microsoft to patch the vulnerability, and observed victims, underscoring the operation's sophistication and potential impact.