Threat Actor: BadPilot
-
Read more: [Threat Actor Profile] Sandworm’s 2024–2025 Playbook — Infrastructure, Targets, TTPs
![[Threat Actor Profile] Sandworm’s 2024–2025 Playbook — Infrastructure, Targets, TTPs](https://noorstream.com/wp-content/uploads/2025/08/noorstream-sandworm.png)
[Threat Actor Profile] Sandworm’s 2024–2025 Playbook — Infrastructure, Targets, TTPs
Sandworm (APT44) GRU unit’s 2024–2025 playbook: ZEROLOT wiper, BadPilot access ops, and sector‑specific TTPs mapped to MITRE.