Russian Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack

The Russian state-sponsored group Sandworm collaborated with another threat actor in a destructive attack against a Ukrainian logistics company. The actors leveraged spear-phishing for initial access and deployed a novel mesh network backdoor before executing data wiping procedures.