APT44 is a threat actor that is actively engaged in the full spectrum of espionage, attack, and influence operations.
What's worrying about this report is that it's coming from Google itself.
With Russia's full-scale invasion in its third year, Sandworm (aka FROZENBARENTS) remains a formidable threat to Ukraine. The group’s operations in support of Moscow’s war aims have proven tactically and operationally adaptable...
...Mandiant continues to see operations from the group that are global in scope in key political, military, and economic hotspots for Russia. Additionally, with a record number of people participating in national elections in 2024, Sandworm’s history of attempting to interfere in democratic processes further elevates the severity of the threat the group may pose in the near-term.
My point being that they deem this serious enough to release publicly themselves instead of an internal memory, and that this is about an active threat actor rather than a mere vulnerability.