Russia-sponsored Sandworm APT group was found impersonating telecom providers to target Ukrainian entities with Colibri Loader and Warzone RAT. Refer https://www.recordedfuture.com/russia-nexus-uac-0113-emulating-telecommunication-providers-in-ukraine
