Stanford CIS

When cyberwar struck its first civilian target

By Brian Nussbaum on

Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin’s Most Dangerous Hackers Andy Greenberg, Doubleday (2019)

In 2017, a piece of malicious software called NotPetya launched the first global data-destruction pandemic. It was probably the most expensive cyberattack in history. The culprit was Sandworm, an aggressive, malicious hacking group, which many analysts linked with Russian military intelligence. Technology journalist Andy Greenberg’s eponymous book tracks the group’s attacks, and the people and companies that chase them across computer networks worldwide. It also spells out the implications of the hackers’ destructive agenda for all of us.

Greenberg recounts the details of the group’s record since at least 2014. He draws on his reportage for Wired on the 2015 and 2016 attacks on the Ukrainian electrical grid, which led to serious blackouts and left hundreds of thousands of Ukrainians without power. In addition to NotPetya, he examines other attacks conducted by, or affiliated with, Sandworm. These range from strikes against election infrastructure in several countries, including the United States, to the 2018 winter Olympic Games in South Korea, and international treaty organizations such as the Organisation for the Prohibition of Chemical Weapons in The Hague, the Netherlands.

Read the full review at Nature.