Sandworm uses pre-compromised OT environments instead of zero-days to escalate OT, ICS attacks after detection
Russian state-sponsored threat group Sandworm is continuing to target industrial and critical infrastructure environments using aggressive lateral movement, legacy malware, and escalation tactics that intensify…