Russia-linked Sandworm reportedly has retooled with 'Cyclops Blink'

A long-running hacking group associated with Russian intelligence has developed a new set of tools to replace malware that was disrupted in 2018, according to an alert Wednesday from the U.S. and U.K. cybersecurity and law enforcement agencies. The advanced persistent threat group, known primarily as Sandworm, is now using a “large-scale modular malware framework” that the agencies call Cyclops Blink. Western governments have blamed Sandworm for major incidents such as the disruption of Ukraine’s electricity grid in 2015, the …

advanced persistent threat (apt) attribution cisa cyclops blink fbi federal bureau of investigation (fbi) gru national security agency (nsa) ncsc russia sandworm threats ukraine