Cyber-espionage campaign mirroring Sandworm TTPs hit Russian and Belarusian military - Help Net Security

A spear-phishing campaign is targeting Russian and Belarusian military personnel, using military-themed documents as lures to deliver malicious LNK files. Researchers note similarities to past campaigns linked to the Sandworm team, though attribution remains unconfirmed.