Researchers from the Google-owned firm conclude that Sandworm personas are linked to several recent attacks on critical infrastructure.