Mapping MITRE ATT&CK to SandWorm APT’s Global Campaign

SandWorm (an APT attributed to Russia’s GRU) is the focus of a DoJ indictment of six military officers; the report reviews the group’s historical disruptive campaigns (NotPetya, Ukrainian power-grid outages, Olympic Destroyer, website defacements), maps their techniques to MITRE ATT&CK (phishing, PowerShell, credential dumping, lateral movement, destructive malware), and discusses the limited practical impact of indictments versus operational disruption and sanctions.