Wiper Attack on Polish Power Grid Linked to Russia’s Sandworm
ID: 7d6a6c4b-0c7f-5ae9-951f-6442d5a791b7
STIX ID: report--7d6a6c4b-0c7f-5ae9-951f-6442d5a791b7
Feed Name: Infosecurity Magazine (News)
Threat Score
A Russia-linked Sandworm APT (UAC-0113) is attributed with medium confidence for a coordinated late-December 2025 cyber-attack on Polish energy infrastructure that deployed a wiper dubbed "DynoWiper" against combined heat-and-power plants and a renewable energy system; Polish authorities say the attack was repelled with no confirmed critical disruptions, and the incident is presented as part of an ongoing pattern of Sandworm operations against energy sectors.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.