A Hacker Group Within Russia’s Notorious Sandworm Unit Is Breaching Western Networks

A team Microsoft calls BadPilot is acting as Sandworm's initial access operation," the company says. And over the last year it's trained its sights on the US, the UK, Canada, and Australia.