/
ttps_attack:T1041 × criticity:high × latest_source_host:welivesecurity.com × limpar

Resultados

2 casos · pág. 1/1

welivesecurity.com · high

FamousSparrow deploys new SparroWocky backdoor against Latin American governments, replacing SparrowDoor

ESET Research reports that the China-aligned APT group FamousSparrow has been using a new modular C++ backdoor, SparroWocky, since at least August 2025. The backdoor has replaced SparrowDoor as the group's main implant. From mid-2025 into 2026, about 90% of the group's targets in ESET telemetry were in Latin America, mostly governmental e…

welivesecurity.com · high

UAC-0099 hands access to Sandworm: MythicRatatoskr backdoor on Yggdrasil mesh precedes wiper attack on Ukrainian grain logistics firm

ESET documents an intrusion at a Ukrainian grain logistics company in which UAC-0099 gained initial access on July 16th, 2025 via a spearphishing email with a malicious attachment, then handed access off to Sandworm. Sandworm carried out a data-wiping attack on September 17th, 2025. A day after initial access, the attackers deployed Mythi…