Russian State-Sponsored Hackers Exploit Mesh Network Backdoor in Ukraine Cyberattack

Russian state-sponsored group Sandworm collaborated with another actor to execute a destructive wiping attack on a Ukrainian logistics company using a new mesh network backdoor. The attack exploited a spear-phishing email with a malware attachment, leading to the deployment of UAC-0099 (Earth Sirrush) malware.

The Russian state-sponsored hacking group Sandworm teamed up with another threat actor to carry out a destructive wiping attack targeting a Ukrainian logistics company last year.

According to ESET, the attack involved UAC-0099 (aka Earth Sirrush) obtaining initial access to the target on July 16, 2025, via a spear-phishing email bearing a malware-laced attachment that led to the deployment of

Read original article