What does it take to become a Sandworm target? Less than you would hope, and the answer has very little to do with who you are. For a subgroup that Microsoft calls BadPilot, it is enough to run an internet-facing appliance with an unpatched vulnerability.