The December cyberattack on Kyivstar, Ukraine’s largest telecoms operator, was likely perpetrated by Sandworm, a state-sponsored Russian hacking group thought to be a military intelligence cyberwarfare unit. Sandworm has precedent for attacking Ukraine, launching multiple attacks against the country’s infrastructure in the early days of the war.
Source: computing.co.uk