Amazon Threat Intelligence identifies Russian cyber threat group targeting Western critical infrastructure | AWS Security Blog

A Russian state-sponsored threat group linked to Sandworm has shifted tactics to exploit misconfigured network edge devices—rather than software vulnerabilities—to gain persistent access and harvest credentials from Western critical infrastructure, especially in the energy sector.