Cybersecurity incident — 2022-02-23 00:00:00
Affected organization: Undetermined
Affected country: Ukraine
Industry: Finance and Insurance
Event type: Disruptive
Event subtype: Data Attack
Motive: Sabotage
Actor: GRU Main Special Center for Special Technologies (Unit 74455) (SANDWORM)
Actor type: Nation-State
Actor country: Russian Federation

UAC-0082 (a.k.a. Sandworm) staged a file encryptor on the network of an agricultural firm, holding this entity at risk for future destruction. Microsoft assesses that this was likely targeting grain production, a major export commodity in Ukraine's economy.