Sandworm is at it again with bad pilot and a subgroup, seashell

I’m trying to see if I can get myself caught up on things, and I think I found a good one here.

We’ve talked about Sandworm many many times through our podcast. This time, they’re using a sub-group named seashell which does other work.

If you’re new to our blog, you can search Sandworm and find things.

There’s also a book talking about Sandworm and its history. They’ve been around a very long time, longer than I remembered seeing their name in fact. Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin’s Most Dangerous Hackers is by Andy Greenberg. If you have not read this book, I highly suggest you do.

Here are all of Andy’s books in case you want to see them.

• Tracers in the Dark: The Global Hunt for the Crime Lords of Cryptocurrency
• Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin’s Most Dangerous Hackers
• This Machine Kills Secrets: Julian Assange, the Cypherpunks, and Their Fight to Empower Whistleblowers

The subgroups that this article talks about is quite interesting as they could make sure that persistance is kept within the network and others can do very specific things if they wish.

Instead of me taking this article apart, why not read it? Its titled BadPilot network hacking campaign fuels Russian SandWorm attacks and it goes in to detail as well as the research that was done.