Sandworm Archivi

Diverging attributions on the energy attack in Poland, new cybercrime offensives in Italy, multiple vulnerabilities exploited ITW

Poland: latest updates on the late-December attack on the power system On December 29, 2025, a coordinated cyberattack hit numerous Polish power system sites connected to distributed generation, in particular...

Phishing and ransomware in Italy, offensives hit the West, new 0-days disclosed

19 Dec

Italy: cybercrime activity across the country A new Polizia di Stato–themed phishing campaign has been tracked in Italy. As observed in previous cases, the email abuses the name and logo...

New attacks in Italy, state-sponsored activity, operations in Ukraine

17 Nov

Italy: cybercrime operations target the country During the past week, several phishing campaigns targeting Italy were identified. In one case, a fake login portal for students and staff of the...

Italy targeted by multiple adversaries, new APT operations, latest developments in cybercrime

10 Nov

Italy: DDoS, phishing, and ransomware attacks detected, along with BadCandy distribution During the first weekend of the month, NoName057(16) continued to claim DDoS attacks against the following Italian targets: the...

New attacks targeting Italy, the latest state-sponsored operations, and newly discovered malware

07 Nov

Italy: NoName057(16) and phishing campaigns threaten the Peninsula The hacktivist group NoName057(16) has claimed new DDoS attacks against Italian portals in protest against the preparation of the twelfth military aid...

APTs between East and West, malware news, three 0-days exploited in malicious campaigns

13 Oct

APT: State-sponsored campaigns detected around the globe This week, multiple campaigns by various state-sponsored adversaries were tracked worldwide. In Russia, the Sandworm subgroup known as Seashell Blizzard targeted critical infrastructure...