As the world gathers to witness the grandeur of a major sporting event's opening ceremony, chaos ensues as an unexpected cyberattack disrupts the celebration. The attack, attributed to the notorious Sandworm group, carries false flags pointing towards other nations. Participants will deconstruct the malware to trace its true origins, drawing parallels to Sandworm's previous operations. This exercise will test your skills in attribution and understanding of advanced persistent threats.