Skip to content
Threat Feed
Subscribe

Actor

Sandworm

1 brief RSS
Also known as: BlackEnergy Voodoo Bear Seashell Blizzard IRIDIUM
high threat

Sandworm Targeted Polish Energy Facility via Private APN Pivot

In December 2025, the threat actor Sandworm exploited an internet-facing firewall and a misconfigured cellular router to pivot through a private APN into a Polish energy facility's OT network, resulting in industrial sabotage.

VPN and firewall +5 Sandworm +4
6t