Bleepingcomputer Sandworm Hackers Target Ukraine's Grain Sector with Data-Wiping Malware
Article Content
Browse articles 
The Russian state-backed hacker group Sandworm has launched a campaign using data-wiping malware against Ukrainian organizations, particularly focusing on the grain sector. This attack aims to disrupt critical infrastructure and weaken Ukraine's economy, with multiple malware families deployed in the second and third quarters of 2025, as reported by cybersecurity firm ESET.
Ask AI about this cluster
Answers cite the sources they use
Updated 231d ago How this analysis works
More articles in this cluster (8)
Following this threat?
Track Sandworm and Sting in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Russian Hackers Use Yggdrasil Network in Cyberattack on Ukrainian Grain Firm In July 2025, Russia-aligned hackers from UAC-0099 gained access to a Ukrainian grain logistics company via a phishing email. They deployed the MATCHWOK backdoor and later introduced a new backdoor, MythicRatatoskr, which communicated through the Yggdrasil decentralized network. This attack culminated in a data-wiping… 
UAC-0099 Enhances MATCHBOIL Malware Targeting Ukrainian Industries ESET Research has documented the evolution of MATCHBOIL, a C# downloader used by the Russia-aligned group UAC-0099, which has targeted Ukrainian transportation, manufacturing, and energy sectors. The malware, first noted by CERT-UA in August 2025, has been under development since at least April 2024. MATCHBOIL is…