Main Centre for Special Technologies (GTsST) of the Main Directorate of the General Staff of the Armed Forces of the Russian Federation (GU/GRU) ('SANDWORM')
List
Type
Entity
List name
United Kingdom
Programs (1)
Cyber
Listed (1)
31.07.2020
Names (8)
Last name/Name
Main Centre for Special Technologies (GTsST) of the Main Directorate of the General Staff of the Armed Forces of the Russian Federation (GU/GRU) ('SANDWORM')
Full name/Name
Main Centre for Special Technologies (GTsST) of the Main Directorate of the General Staff of the Armed Forces of the Russian Federation (GU/GRU) ('SANDWORM')
Type
Primary name
Last name/Name
Voodoo Bear
Full name/Name
Voodoo Bear
Type
AKA (also known as)
Last name/Name
Telebots
Full name/Name
Telebots
Type
AKA (also known as)
Last name/Name
Sandworm Team
Full name/Name
Sandworm Team
Type
AKA (also known as)
Last name/Name
Quedagh
Full name/Name
Quedagh
Type
AKA (also known as)
Last name/Name
Olympic Destroyer
Full name/Name
Olympic Destroyer
Type
AKA (also known as)
Last name/Name
Field Post Number 74455
Full name/Name
Field Post Number 74455
Type
AKA (also known as)
Last name/Name
BlackEnergy Group
Full name/Name
BlackEnergy Group
Type
AKA (also known as)
Addresses (1)
Country
Russian Federation
Identification documents (2)
Type
Entity Parent Company: Russian Ministry of Defence
Type
Entity Type: Department within Government/Military Unit
Notes (2)
The Main Centre for Special Technologies (GTsST) of the Russian General Staff Main Intelligence Directorate (GRU), also known by its field post number ‘74455’ and “Sandworm” by industry, was responsible for cyber attacks which disrupted critical national infrastructure in Ukraine, cutting off the electricity grid. The perpetrators were directly responsible for relevant cyber activity by carrying out information system interference intended to undermine integrity, prosperity and security of the Ukraine. These cyber attacks originated in Russia and were unauthorised.
The Main Centre for Special Technologies (GTsST) of the Russian General Staff Main Intelligence Directorate (GRU), also known by its field post number ‘74455’ and “Sandworm” by industry, was responsible for cyber attacks which disrupted critical national infrastructure in Ukraine, cutting off the electricity grid. The perpetrators were directly responsible for relevant cyber activity by carrying out information system interference intended to undermine integrity, prosperity and security of the Ukraine. These cyber attacks originated in Russia and were unauthorised
Historical data
Names (8)
Status
Historical (last time active at 28.02.2022 05:16)
Last name/Name
Main Centre for Special Technologies (GTsST) of the Main Directorate of the General Staff of the Armed Forces of the Russian Federation (GU/GRU) ('SANDWORM')
Full name/Name
Main Centre for Special Technologies (GTsST) of the Main Directorate of the General Staff of the Armed Forces of the Russian Federation (GU/GRU) ('SANDWORM')
Type
Prime alias
Status
Historical (last time active at 28.02.2022 05:16)
Last name/Name
Blackenergy Group
Full name/Name
Blackenergy Group
Type
AKA (also known as)
Status
Historical (last time active at 28.02.2022 05:16)
Last name/Name
Voodoo Bear
Full name/Name
Voodoo Bear
Type
AKA (also known as)
Status
Historical (last time active at 28.02.2022 05:16)
Last name/Name
Olympic Destroyer
Full name/Name
Olympic Destroyer
Type
AKA (also known as)
Status
Historical (last time active at 28.02.2022 05:16)
Last name/Name
Field Post Number 74455
Full name/Name
Field Post Number 74455
Type
AKA (also known as)
Status
Historical (last time active at 28.02.2022 05:16)
Last name/Name
Sandworm Team
Full name/Name
Sandworm Team
Type
AKA (also known as)
Status
Historical (last time active at 28.02.2022 05:16)
Last name/Name
Telebots
Full name/Name
Telebots
Type
AKA (also known as)
Status
Historical (last time active at 28.02.2022 05:16)
Last name/Name
Quedagh
Full name/Name
Quedagh
Type
AKA (also known as)
Addresses (1)
Status
Historical (last time active at 28.02.2022 05:16)
Country
Russian Federation
Full address
22 Kirova Street Moscow Russia
Identification documents (2)
Status
Historical (last time active at 28.02.2022 05:16)
Type
Parent Company: Russian Ministry of Defence.
Status
Historical (last time active at 28.02.2022 05:16)
Type
Org Type: Department within Government/Military Unit.
Updated: 29.04.2025. 02:16
The Sanction catalog includes Latvian, United Nations, European Union, United Kingdom and Office of Foreign Assets Control and Canada subjects included in sanction list.
