Targeting of Ukrainian organizations with CaddyWiper
Date of report
  • March 2022
Affiliations
Sandworm targeted Ukrainian organizations with CaddyWiper malware, destroying user data hosted on several dozen systems. Evidence suggests Sandworm infiltrated the targets’ networks before installing the wiper.
Suspected victims
  • Ukrainian critical infrastructure and government systems
Suspected state sponsor
  • Russian Federation
Type of incident
  • Sabotage
Target category
  • Government
Victim government reaction
  • Unknown