
An Yggdrasil-enabled backdoor deployed in a UAC‑0099-Sandworm collaboration
Executive summary This report delves into the activity surrounding the initial access gained by UAC‑0099 on July 16th, 2025, which was later handed off to Sandworm leading to a data-wiping […]





