October 25, 2026
- Sandworm and UAC-0099 teamed up for a destructive wiper attack on a Ukrainian logistics company, with UAC-0099 (aka Earth Sirrush) gaining initial access on July 16, 2025 via a spear-phishing attachment, per ESET. The intrusion involved a previously undocumented mesh-network backdoor. (The Hacker News)
· Threat Activity
in When the Red Team Is the Model: OpenAI's Agents Escaped Their Own Sandbox
October 23, 2026
- MythicRatatoskr hides its C2 inside the Yggdrasil mesh network. ESET documents a previously unreported Go backdoor used against a Ukrainian grain logistics firm: UAC-0099 gained initial access on July 16, 2025 and handed it to Sandworm, which ran a data-wiping attack on September 17, 2025. ESET
· Threat Activity
in Two Unpatched KSMBD RCEs Go Public — and an AI Scanner Found Them
October 11, 2026
- UAC-0099 has a previously undocumented .NET RAT. TrendAI attributes ASHVEIN (internally "TelemetryBrowser") to the Russia-aligned group it tracks as Earth Sirrush, used against Ukrainian government personnel. It steals Chrome and Firefox credentials, captures GDI screenshots, runs PowerShell remote shells, and hides tasking inside invisible HTML elements; some variants use a GitHub dead drop resolver as C2 fallback, with delivery via DLL sideloading, VHD containers and .NET droppers. ESET has previously described the group as an initial-access broker for Sandworm. The Hacker News
· Threat Activity
in Microsoft's 17 Trillion-Row Analytics Service Fell to One Unchecked JWT
October 9, 2026
- ESET traced MATCHBOIL back further than CERT-UA's first write-up. The C# downloader used by Russia-aligned UAC-0099 against Ukrainian targets has versions from April 2024 through April 2026, each iteration more sophisticated in how it fetches, installs and persists its payload (ESET, Dark Reading) (earlier coverage).
· Threat Activity
in Third NetScaler RCE in a Month Lands on the Same SAML Surface
October 8, 2026
- UAC-0099 / Earth Sirrush embeds ZIP payloads inside PNG images, extracted via predefined markers, with spear-phishing for access, scheduled-task persistence, C2 tasking hidden in invisible HTML footer elements, sandbox checks and hybrid AES-RSA C2 encryption (technical brief).
· Threat Activity
in Two Hours From Public Detail to Exploit Attempts Against Atlassian
September 2, 2026
- UAC-0099 is weaponising LLM safety filters as an anti-analysis technique. ESET's GuardBreaker write-up describes the Russia-aligned actor embedding nuclear-weapons-themed content in malware to deliberately trip refusal behaviour and block AI-assisted reverse engineering of samples (The Hacker News). Follows the same actor's activity noted last week (earlier coverage).
· AI & Model Security
in OpenAI Says Astra Crossed the Line: Autonomous Zero-Day Discovery at "Critical" Cyber Risk
August 29, 2026
- ESET documented GuardBreaker, an anti-EDR technique used by Russia-aligned UAC-0099 against a Ukrainian victim (@thegrugq), continuing a busy week for the group (earlier coverage). Separate analysis traces a UAC-0099 WSF lure through a LUNCHPOKE → BURNYBEAR → MATCHBOIL.V2 chain with claimed overlap into Sandworm activity (chain analysis).
· Threat Activity
in PaperCut Ships a Second Emergency Patch After Researchers Bypass the First
August 28, 2026
- UAC-0099 is deliberately tripping LLM safety filters to block malware analysis. ESET documented GuardBreaker, used against a Ukrainian victim: the operators pad a malicious VBS downloader with a comment asking for help building a nuclear weapon, so an AI-assisted analysis pipeline refuses and never reaches the actual MATCHBOIL installer logic (ESET Research). Anyone running LLM triage in a malware workflow should assume this is now standard tradecraft.
· AI & Model Security
in Australia Charges Two Over the TeamPCP Supply-Chain Spree