Executive Summary In a concerning development for global cybersecurity, a multi-stage intrusion has been uncovered involving a strategic handoff between two Russia-aligned threat actors: UAC-0099 and the notorious Sandworm group (linked to GRU Unit 74455). This report details an attack that began on July 16, 2025, against a Ukrainian grain logistics company, ultimately culminating in […]
Sky-High Defenses: Are Russia’s Barrage Balloons a Genuine Shield or Wartime Theater?
In a desperate bid to shield its critical energy infrastructure from persistent Ukrainian long-range drone strikes, Russia has turned to a defense technology that seemingly belongs to the annals of the early 20th century: the barrage balloon. Across several key oil refineries, observers have noted the deployment of tethered balloons, connected by complex cable networks […]
MATCHBOIL: The Evolving Toolkit of Russia-Aligned APT UAC-0099
Executive Summary In a two-year investigation, ESET researchers have tracked the persistent evolution of MATCHBOIL, a sophisticated C# downloader utilized by the Russia-aligned advanced persistent threat (APT) group known as UAC-0099. While initially brought to public attention by Ukraine’s Computer Emergency Response Team (CERT-UA) in August 2025, retrospective analysis indicates that the malware has been […]
Russia’s United Aircraft Corporation Targets Indian Regional Aviation Market with 85 Il-114-300 Turboprop Agreements
New Delhi — In a major development unfolding ahead of the BRICS summit in New Delhi, Russia’s state-owned United Aircraft Corporation (UAC) has signed initial agreements to supply 85 regional turboprop aircraft to two Indian entities. The pacts, formalised at the INNOPROM.India trade exhibition, signal a concerted push by Moscow to secure a foothold in […]