Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin's Most Dangerous Hackers

by Andy Greenberg

Andy Greenberg's Sandworm tells the story of the Russian military hacking unit behind some of the most destructive cyberattacks in history. The book traces the evolution of the group known as Sandworm (Unit 74455 of Russia's GRU) from their early attacks on Ukrainian power grids, which caused real-world blackouts affecting hundreds of thousands of people, through the devastating NotPetya malware that caused over $10 billion in damage worldwide and the Olympic Destroyer attack on the 2018 Winter Games. Greenberg weaves together the technical details of the attacks with the geopolitical context, the investigation by security researchers and intelligence agencies, and the human stories of the people affected. The book is a landmark work of cybersecurity journalism that makes the case for treating destructive cyber operations as a form of warfare with real-world consequences.