FireEye - Statement on Russian Cyber Attacks to Country of Georgia

“The attacks in Georgia which were just attributed to Sandworm, the Russian actor behind NotPetya and the blackouts in Ukraine, are con sistent with their prior behavior. Attacks on media are a regular feature of Sandworm campaigns. Prior to the first blackout in Ukraine, they took media offline during their election there.
 
It’s very notable that Sandworm has been finally officially tied to GRU Unit 74455, confirming our prior analysis that it is one of the two GRU units that collaborated in 2016 election interference. In addition to the election interference, Ukraine blackouts, and the NotPetya incidents, we believe the organization was behind an attack on the Pyeongchang Olympics. Notably, they have not been publicly admonished for their attempt to disrupt the Games, and we are concerned that the actors will target the Games in Tokyo this year.” – John Hultquist, Senior Director, Intelligence Analysis at FireEye