Heading to #VB2026? Join #ESETresearch’s Anton Cherepanov and Peter Strýček on Oct 16 at 12:00 - 12:30 CEST in Seville, Spain for: Inside a Sandworm Attack: UAC-0099 Access and a Yggdrasil-backed Backdoor. 1/4

Show Post

Drawing on ESET’s investigations of 10+ 🇷🇺 Sandworm-linked incidents in 2025, we’ll unpack the group’s latest TTPs and a rarely documented collaboration between Sandworm and UAC-0099 during a destructive attack against a 🇺🇦 Ukrainian grain logistics company. 2/4

Show Post

The intrusion began with a spearphishing email that led to the deployment of UAC-0099’s MATCHWOK backdoor. From there, attackers established a foothold and delivered a previously unseen backdoor ESET named MythicRatatoskr. 3/4

Show Post

ESET researchers will dive into MythicRatatoskr, its use of the Yggdrasil decentralized mesh network for C&C communications, and what this unique case reveals about modern destructive operations. See you at #VB2026. 4/4

Show Post

Join #ESETresearch’s Damien Schaeffer for Gorbag: Orcs at the Border at VB Conference 2026 in Seville, Spain, on 14 October at 11:25 CEST. Learn how this newly identified 🇷🇺 Russia-aligned cyberespionage group targets 🇺🇦 Ukrainian entities. More: www.virusbulletin.com/conference/v... 1/4

Show Post