Sandworm (aka Seashell Blizzard) has an initial access wing called "BadPilot" that uses standard intrusion tactics to spread Russia’s tendrils around the world.
Source: htdarkreading.com