Cybersecurity entity

Sandworm

threat-actor

Every one of those 3 sits in a single category, threat-intel. Sandworm is most often covered alongside Russia, which appears in 2 of these 3 stories. Each story carries 2 original sources on average, compared with 3.1 for the broader beat in this window.

Last mentioned: Mar 21, 2026

Entity pulse

Recent coverage · Sandworm

3 stories
8 avg impact
0% positive
100% negative

Coverage balance Negative coverage leads. Negative coverage exceeds positive coverage by 100 percentage points.

  • 100% negative

Figures are computed live from our source-verified story record — see our methodology for how impact and sentiment are derived.

What the coverage shows about Sandworm

Every one of those 3 sits in a single category, threat-intel. Sandworm is most often covered alongside Russia, which appears in 2 of these 3 stories. Each story carries 2 original sources on average, compared with 3.1 for the broader beat in this window. Across a 26-day span, the pace is roughly 0.8 stories per week. The 8 average consequence score is above the beat benchmark of 7.1 in the same window. Sandworm appears in 3 tracked Cybersecurity stories published from February 24, 2026 through March 21, 2026.

Stories tracked
3
Per week
0.8
Sources per story
2

Computed from the 3 stories linked to this entity, with beat comparisons drawn from all 366 Cybersecurity stories published in the same date window. Shares are omitted below five stories and comparisons below a twenty-story baseline.

Coverage cohort

Appears alongside

Other entities that clear the same relevance threshold in stories also covering Sandworm. Shared-story counts are live from our verified record — not editorial picks.

Timeline

  1. Offensive Readiness

    Reports confirm Russia is in the final stages of preparing a multi-axis offensive, signaling imminent hybrid operations.

  2. Infrastructure Pressure

    Ukraine reports increased DDoS attacks on public service portals and telecommunication providers.

  3. Cyber Reconnaissance

    Spike in phishing campaigns targeting Ukrainian military and government personnel detected by threat intelligence firms.

  4. Initial Buildup

    Satellite imagery and intelligence reports indicate massive Russian troop movements toward the eastern border.

  5. Four-Year Anniversary

    Ukraine marks four years of conflict with frontlines largely frozen but cyber operations continuing at high intensity.

  6. Energy Grid Resilience

    Ukraine successfully thwarts a coordinated series of attacks on regional power distributors during the onset of winter.

  7. Kyivstar Outage

    A massive cyberattack strikes Ukraine's largest telecom provider, Kyivstar, leaving millions without mobile and internet service for days.

  8. Invasion & Viasat Attack

    Russia launches physical invasion synchronized with a massive cyberattack on the Viasat KA-SAT network to disrupt Ukrainian military comms.

Stories mentioning Sandworm 3

Threat Intelligence Negative

Four Years of Hybrid War: The Evolution of Russia-Ukraine Cyber Conflict

As Ukraine marks the fourth anniversary of the full-scale Russian invasion, the conflict has redefined modern hybrid warfare through unprecedented cyber-kinetic synchronization. This milestone highlights the resilience of Ukraine's digital infrastructure and the shifting tactics of state-sponsored threat actors in a prolonged war of attrition.

2 sources

Sandworm is linked from 3 stories on this site, each scored at or above our 35% relevance threshold — see how these pages are built.

See something wrong on this page — a misattributed entity, a wrong stat, a broken source link? Report a data issue.