Russia-linked UAC-0099 and Sandworm use Yggdrasil network and SDelete in destructive attack on Ukrainian grain logistics firm
ESET reports that Russia-linked actors used the decentralized Yggdrasil mesh network to hide command-and-control traffic during an attack on a Ukrainian grain logistics company in July 2025. ESET says this is the first documented use of the technology by a state-linked group. The intrusion began with a phishing email sent in a campaign ag…