# Russia-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack

**URL:** <https://forums.thehomestack.io/t/russia-linked-hackers-used-new-mesh-network-backdoor-in-destructive-ukraine-attack/26584>\
**Category:** The Hacker News\
**Created:** [October 23, 2026, 11:40am UTC](https://forums.thehomestack.io/t/russia-linked-hackers-used-new-mesh-network-backdoor-in-destructive-ukraine-attack/26584 "2026-10-23T11:40:19Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![robinhood1995](https://forums.thehomestack.io/letter_avatar_proxy/v4/letter/r/48db29/32.png) [@robinhood1995](https://forums.thehomestack.io/u/robinhood1995)\
**Post date:** [October 23, 2026, 11:40am UTC](https://forums.thehomestack.io/t/russia-linked-hackers-used-new-mesh-network-backdoor-in-destructive-ukraine-attack/26584/1 "2026-10-23T11:40:19Z")

</div>

The Russian state-sponsored hacking group Sandworm teamed up with another threat actor to carry out a destructive wiping attack targeting a Ukrainian logistics company last year.

According to ESET, the attack involved UAC-0099 (aka Earth Sirrush) obtaining initial access to the target on July 16, 2025, via a spear-phishing email bearing a malware-laced attachment that led to the deployment of

* * *
This is a companion discussion topic for the original entry at [https://thehackernews.com/2026/10/russian-linked-hackers-used-new-mesh.html](https://thehackernews.com/2026/10/russian-linked-hackers-used-new-mesh.html)