/
malware_families:SDelete × criticity:high × limpar

Resultados

3 casos · pág. 1/1

olhardigital.com.br · high

Russia-linked UAC-0099 and Sandworm use Yggdrasil network and SDelete in destructive attack on Ukrainian grain logistics firm

ESET reports that Russia-linked actors used the decentralized Yggdrasil mesh network to hide command-and-control traffic during an attack on a Ukrainian grain logistics company in July 2025. ESET says this is the first documented use of the technology by a state-linked group. The intrusion began with a phishing email sent in a campaign ag…

thehackernews.com · high

UAC-0099 hands off access to Sandworm for wiper attack on Ukrainian logistics firm using MythicRatatoskr backdoor over Yggdrasil

ESET reports that UAC-0099 (aka Earth Sirrush) gained initial access to a Ukrainian logistics company on July 16, 2025, through a spear-phishing email with a malicious attachment. The group then handed access to Sandworm, which carried out a data-wiping attack on September 17, 2025, more than two months after the initial foothold. UAC-009…

welivesecurity.com · high

UAC-0099 hands access to Sandworm: MythicRatatoskr backdoor on Yggdrasil mesh precedes wiper attack on Ukrainian grain logistics firm

ESET documents an intrusion at a Ukrainian grain logistics company in which UAC-0099 gained initial access on July 16th, 2025 via a spearphishing email with a malicious attachment, then handed access off to Sandworm. Sandworm carried out a data-wiping attack on September 17th, 2025. A day after initial access, the attackers deployed Mythi…