Sandworm / UAC-0099
Unknown Active
- Mentions
- 1
- First seen
- 23 Oct 2026
- Last seen
- 23 Oct 2026
Relevant to you · Relevant
- Threat focus:
- industrial / ot espionage
- Sector / region:
- ManufacturingDACH
Origin
Unattributed
Profile
Sandworm (also known as UAC-0099) is a Russian-linked threat actor. According to recent reporting, the group used a new mesh network backdoor in a destructive attack against Ukraine. The attack highlights the ongoing threat from state-aligned cyber operations. Further details on targeted sectors are not evident from the headline.
Targeted regions
Europe
Targeted countries
Ukraine
Associated malware / tools
mesh network backdoor