{"actor":{"id":"apt44","name":"APT44","aliases":["Sandworm Team","Hades","UAC-0113","BlackEnergy Group","ELECTRUM","Quedagh","Telebots","FROZENBARENTS","Seashell Blizzard","BE2 APT","Sandworm","GreyEnergy"],"vendor_names":{"mandiant":"APT44","microsoft":"IRIDIUM","crowdstrike":"VOODOO BEAR","mitre":"G0034","secureworks":"IRON VIKING"},"mitre_gid":"G0034","type":"nation-state","type_verbatim":"nation-state APT","secondary_types":[],"origin":"RU","origins":["RU"],"targets":["AO","AT","AU","BG","CA","CH","CO","DE","ES","FR","GB","GE","IR","IT","KR","KZ","NL","NO","NZ","PL","RU","SK","TR","UA","US"],"target_regions":[],"sectors":["avi","consulting-professional-services","consumer-goods-electronics","cryptocurrency","edu","energy-utilities","fin","gov","hea","hospitality","manufacturing-man","med","ngo","oil-and-gas","real-estate","ret","tel"],"threat_types":["dis","esp"],"mitre_techniques":["T1003.001","T1003.003","T1005","T1018","T1021.002","T1027","T1027.010","T1033","T1036","T1036.005","T1040","T1041","T1047","T1049","T1053.005","T1059.001","T1059.005","T1070.004","T1071.001","T1072","T1078","T1078.002","T1083","T1090","T1102.002","T1105","T1106","T1140","T1190","T1195","T1195.002","T1199","T1203","T1204.001","T1218.011","T1219","T1485","T1486","T1489","T1490","T1499","T1555.003","T1561.002","T1566.001","T1566.002","T1570","T1571","T1583","T1583.004","T1589.002","T1589.003","T1590.001","T1592.002","T1593","T1594"],"gir_codes":[],"active_since":2009,"brief":"GRU Unit 74455 destructive-attack and disinformation group.","attribution_sponsor":null,"attribution_confidence":null,"merged_into":null,"split_from":[],"created_at":"2026-05-20T09:50:18.366961+00:00","updated_at":"2026-07-29T07:05:42.966+00:00","url":"https://aptatlas.net/actors/apt44"},"exports":{"stix":"https://aptatlas.net/api/v1/actors/apt44/stix","navigator":"https://aptatlas.net/api/v1/actors/apt44/navigator"}}