Russian-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack
// summary
Russian-linked hackers used a new mesh network backdoor in a destructive attack against a Ukrainian logistics company after initial access via a spear-phishing email.
// from the source
The Russian state-sponsored hacking group Sandworm teamed up with another threat actor to carry out a destructive wiping attack targeting a Ukrainian logistics company last year. According to ESET, the attack involved UAC-0099 (aka Earth Sirrush) obtaining initial access to the target on July 16, 2025, via a spear-phishing email bearing a malware-laced attachment that led to the deployment of