3 casos · pág. 1/1
ESET documents an intrusion at a Ukrainian grain logistics company in which UAC-0099 gained initial access on July 16th, 2025 via a spearphishing email with a malicious attachment, then handed access off to Sandworm. Sandworm carried out a data-wiping attack on September 17th, 2025. A day after initial access, the attackers deployed Mythi…
ESET reports that UAC-0099 (aka Earth Sirrush) gained initial access to a Ukrainian logistics company on July 16, 2025, through a spear-phishing email with a malicious attachment. The group then handed access to Sandworm, which carried out a data-wiping attack on September 17, 2025, more than two months after the initial foothold. UAC-009…
The FBI, CISA, DC3, NSA, USSS and the Republic of Korea's KNPA issued joint advisory AA26-222A on Gunra ransomware. Gunra appeared in April 2025 as a double-extortion variant derived from the leaked Conti source code. It launched a structured RaaS affiliate program in January 2026, also operating under the alias Golden Community, and recr…
