Mandiant: Notorious Russian hacking unit linked to breach of Texas water facility

Mandiant attributes a series of disruptive attacks on water utilities and other critical infrastructure to the Russian GRU-aligned Sandworm (now tracked as APT44), linking the group to online personas such as CyberArmyofRussia_Reborn and Solntsepek; incidents cited include a Texas water-tank overflow and attacks on Ukrainian telecoms. The report elevates Sandworm to a fully capable state-backed APT conducting espionage, influence, and destructive operations against government, energy, transportation and media targets and warns of growing threats to U.S. water-sector cybersecurity.