Bleepingcomputer Sandworm Launches Wiper Malware Campaign Against Ukrainian Organizations
Article Content
Browse articles 
The Russian state-backed hacking group Sandworm has intensified its operations against Ukrainian organizations by deploying data-wiping malware. This campaign targets critical sectors, including the grain industry, and aims to disrupt operations and weaken the economy. The attacks involve multiple malware families, including Zerolot and Sting, and have been ongoing throughout 2025.
Ask AI about this cluster
Answers cite the sources they use
Updated 219d ago How this analysis works
More articles in this cluster (5)
Following this threat?
Track Sandworm and Sting in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
UAC-0099 Enhances MATCHBOIL Malware Targeting Ukrainian Industries ESET Research has documented the evolution of MATCHBOIL, a C# downloader used by the Russia-aligned group UAC-0099, which has targeted Ukrainian transportation, manufacturing, and energy sectors. The malware, first noted by CERT-UA in August 2025, has been under development since at least April 2024. MATCHBOIL is… 
UAC-0099 Targets Ukrainian Government with ASHVEIN Malware The Russia-aligned threat actor UAC-0099 has been linked to a new .NET infostealer and RAT named ASHVEIN, targeting Ukrainian government personnel. This malware, also referred to as 'TelemetryBrowser,' features capabilities such as credential theft from Chrome and Firefox, screenshot capture, and remote shell…