Cyberpress DynoWiper Malware Targets Polish Energy Sector in Late 2025 Attacks
Article Content
Browse articles 
In late December 2025, Russian-linked hackers from the Sandworm group launched attacks using a new wiper malware named DynoWiper, specifically targeting a Polish energy company. The malware is designed to cause destructive data loss, impacting the operations of energy firms in the region.
Ask AI about this cluster
Answers cite the sources they use
Updated 218d ago How this analysis works
More articles in this cluster (2)
Following this threat?
Track Sandworm and DynoWiper in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
UAC-0099 Enhances MATCHBOIL Malware Targeting Ukrainian Industries ESET Research has documented the evolution of MATCHBOIL, a C# downloader used by the Russia-aligned group UAC-0099, which has targeted Ukrainian transportation, manufacturing, and energy sectors. The malware, first noted by CERT-UA in August 2025, has been under development since at least April 2024. MATCHBOIL is… 
UAC-0099 Targets Ukrainian Government with ASHVEIN Malware The Russia-aligned threat actor UAC-0099 has been linked to a new .NET infostealer and RAT named ASHVEIN, targeting Ukrainian government personnel. This malware, also referred to as 'TelemetryBrowser,' features capabilities such as credential theft from Chrome and Firefox, screenshot capture, and remote shell…