
What was once the quiet realm of science has become the backbone of commerce and defense. The same satellites that enable communication also expose the…
![[Threat Actor Profile] Sandworm’s 2024–2025 Playbook — Infrastructure, Targets, TTPs](https://noorstream.com/wp-content/uploads/2025/08/noorstream-sandworm.png)
Sandworm (APT44) GRU unit’s 2024–2025 playbook: ZEROLOT wiper, BadPilot access ops, and sector‑specific TTPs mapped to MITRE.

Executive Summary Between 11–12 August 2025, multiple high-impact vulnerabilities and breaches moved into active exploitation. Targets span OT infrastructure, enterprise IT gateways, and telecom customer databases. Immediate priorities: patch vulnerable systems,…