{
	"id": "87af0d59-53db-4637-b242-f53dee8cc481",
	"created_at": "2026-04-06T00:13:57.124215Z",
	"updated_at": "2026-04-10T13:11:39.209689Z",
	"deleted_at": null,
	"sha1_hash": "e6cbdd8471447b8006b3e040179d02f801044d12",
	"title": "The United States Condemns Russian Cyber Attack Against the Country of Georgia - United States Department of State",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 31493,
	"plain_text": "The United States Condemns Russian Cyber Attack Against the\r\nCountry of Georgia - United States Department of State\r\nBy Michael R. Pompeo, Secretary of State\r\nArchived: 2026-04-05 16:26:37 UTC\r\nOn October 28, 2019, the Russian General Staff Main Intelligence Directorate (GRU) Main Center for Special\r\nTechnologies (GTsST, also known as Unit 74455 and Sandworm) carried out a widespread disruptive cyber attack\r\nagainst the country of Georgia.  The incident, which directly affected the Georgian population, disrupted\r\noperations of several thousand Georgian government and privately-run websites and interrupted the broadcast of\r\nat least two major television stations.  This action contradicts Russia’s attempts to claim it is a responsible actor in\r\ncyberspace and demonstrates a continuing pattern of reckless Russian GRU cyber operations against a number of\r\ncountries.  These operations aim to sow division, create insecurity, and undermine democratic institutions.\r\nThe United States calls on Russia to cease this behavior in Georgia and elsewhere.  The stability of cyberspace\r\ndepends on the responsible behavior of nations.  We, together with the international community, will continue our\r\nefforts to uphold an international framework of responsible state behavior in cyberspace.\r\nWe also pledge our support to Georgia and its people in enhancing their cybersecurity and countering malicious\r\ncyber actors.  We will offer additional capacity building and technical assistance to help strengthen Georgia’s\r\npublic institutions and improve its ability to protect itself from these kinds of activities.\r\nSource: https://2017-2021.state.gov/the-united-states-condemns-russian-cyber-attack-against-the-country-of-georgia/index.html\r\nhttps://2017-2021.state.gov/the-united-states-condemns-russian-cyber-attack-against-the-country-of-georgia/index.html\r\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MITRE"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://2017-2021.state.gov/the-united-states-condemns-russian-cyber-attack-against-the-country-of-georgia/index.html"
	],
	"report_names": [
		"index.html"
	],
	"threat_actors": [
		{
			"id": "8941e146-3e7f-4b4e-9b66-c2da052ee6df",
			"created_at": "2023-01-06T13:46:38.402513Z",
			"updated_at": "2026-04-10T02:00:02.959797Z",
			"deleted_at": null,
			"main_name": "Sandworm",
			"aliases": [
				"IRIDIUM",
				"Blue Echidna",
				"VOODOO BEAR",
				"FROZENBARENTS",
				"UAC-0113",
				"Seashell Blizzard",
				"UAC-0082",
				"APT44",
				"Quedagh",
				"TEMP.Noble",
				"IRON VIKING",
				"G0034",
				"ELECTRUM",
				"TeleBots"
			],
			"source_name": "MISPGALAXY:Sandworm",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "7bd810cb-d674-4763-86eb-2cc182d24ea0",
			"created_at": "2022-10-25T16:07:24.1537Z",
			"updated_at": "2026-04-10T02:00:04.883793Z",
			"deleted_at": null,
			"main_name": "Sandworm Team",
			"aliases": [
				"APT 44",
				"ATK 14",
				"BE2",
				"Blue Echidna",
				"CTG-7263",
				"FROZENBARENTS",
				"G0034",
				"Grey Tornado",
				"IRIDIUM",
				"Iron Viking",
				"Quedagh",
				"Razing Ursa",
				"Sandworm",
				"Sandworm Team",
				"Seashell Blizzard",
				"TEMP.Noble",
				"UAC-0082",
				"UAC-0113",
				"UAC-0125",
				"UAC-0133",
				"Voodoo Bear"
			],
			"source_name": "ETDA:Sandworm Team",
			"tools": [
				"AWFULSHRED",
				"ArguePatch",
				"BIASBOAT",
				"Black Energy",
				"BlackEnergy",
				"CaddyWiper",
				"Colibri Loader",
				"Cyclops Blink",
				"CyclopsBlink",
				"DCRat",
				"DarkCrystal RAT",
				"Fobushell",
				"GOSSIPFLOW",
				"Gcat",
				"IcyWell",
				"Industroyer2",
				"JaguarBlade",
				"JuicyPotato",
				"Kapeka",
				"KillDisk.NCX",
				"LOADGRIP",
				"LOLBAS",
				"LOLBins",
				"Living off the Land",
				"ORCSHRED",
				"P.A.S.",
				"PassKillDisk",
				"Pitvotnacci",
				"PsList",
				"QUEUESEED",
				"RansomBoggs",
				"RottenPotato",
				"SOLOSHRED",
				"SwiftSlicer",
				"VPNFilter",
				"Warzone",
				"Warzone RAT",
				"Weevly"
			],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775434437,
	"ts_updated_at": 1775826699,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/e6cbdd8471447b8006b3e040179d02f801044d12.pdf",
		"text": "https://archive.orkl.eu/e6cbdd8471447b8006b3e040179d02f801044d12.txt",
		"img": "https://archive.orkl.eu/e6cbdd8471447b8006b3e040179d02f801044d12.jpg"
	}
}