Russia’s Sandworm crew appear to have been responsible for knocking out mobile and internet services to about 24 million users in Ukraine last month with an attack on telco giant Kyivstar. The criminals lurked in the telco’s systems for at least six months leading up to the attack, then wiped “almost everything,”
Source: The Register