Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin's Most Dangerous Hackers
by Andy Greenberg
View on GoodreadsWired's Andy Greenberg on Sandworm — the GRU Unit 74455 hacking group — responsible for the Ukraine power-grid attacks, the NotPetya wiper that caused $10B in global damage, and operations against the Olympics and Western infrastructure.
Core ideas
- NotPetya is treated as the decisive case study: a Russian wiper malware aimed at Ukraine that escaped containment and disabled Maersk, Merck, FedEx, and dozens of other multinationals — the first true case of cyberwar civilian collateral damage at scale.
- The attribution work is the book's craft: how a small community of researchers across vendors and governments built the case that Sandworm was specifically GRU 74455, with named individuals, despite Russian denial.
- The deterrence problem is the book's unsolved puzzle: Russia faced essentially no consequence for NotPetya, which means the precedent is set for state-actor wiper attacks with civilian-infrastructure collateral.
Published2019
Pages368
ISBN9780385544412
ReadAug 2024








