/
attack_type:backdoor × latest_source_host:welivesecurity.com × victim_sectors:transportation × limpar

Resultados

2 casos · pág. 1/1

welivesecurity.com · high

UAC-0099 hands access to Sandworm: MythicRatatoskr backdoor on Yggdrasil mesh precedes wiper attack on Ukrainian grain logistics firm

ESET documents an intrusion at a Ukrainian grain logistics company in which UAC-0099 gained initial access on July 16th, 2025 via a spearphishing email with a malicious attachment, then handed access off to Sandworm. Sandworm carried out a data-wiping attack on September 17th, 2025. A day after initial access, the attackers deployed Mythi…

UAC-0099 Sandworm logistics agriculture
welivesecurity.com · high

UAC-0099 evolves MATCHBOIL C# downloader targeting Ukrainian transport, manufacturing and energy firms

ESET documented the evolution of MATCHBOIL, a custom C downloader used by the Russia-aligned cyberespionage group UAC-0099. Samples span April 2024 to April 2026, although CERT-UA first documented the malware in August 2025. Each iteration became more sophisticated, with new obfuscation, sandbox checks and persistence methods. All victims…

UAC-0099 Sandworm transportation manufacturing