ResearcherESET WeLiveSecurity
MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaborationType Research & news
Linux Kernel
ESET APT Activity Report Q2 2026–Q3 2026
3 sources
At a glance
Low
MonitorNo fixed deadline
Evidence-weighted, not popularity
Why Low
Low rather than Medium: UK relevance is 40 of 100, little UK-specific signal so far.
Briefing
There is no written leader briefing for this story yet. The summary below says what is known so far.
Next steps
Monitor- For awareness — no fixed action deadline for this reporting
- Read Alexandre Côté Cyr and Romain Dumont • 17 Sep 2026 • 17 min. Read The PHP2Shell disclosure and other major cybersecurity news this month brought into relief the need for well-thought-out cyber-readiness plans Editor • 30 Oct 2026 The malware.
Next steps
Monitor- No immediate technical action — track if your estate depends on the products or vendors discussed
Summary
- Read Alexandre Côté Cyr and Romain Dumont • 17 Sep 2026 • 17 min.
Read the original reportESET WeLiveSecurity(opens in a new tab)
Products and services involved
- Linux Kernel98% match confidence
Same event, different frames
Distinct often headline the same incident differently.
NewsThe Record from Recorded Future News
Russian hackers teamed up to wipe data at Ukrainian grain firmNewsWeLiveSecurity
ESET APT Activity Report Q2 2026–Q3 2026Pulse
Last checked 7d ago · Next recheck 8 Nov 2026, 23:43 UK time
Update
1 Nov 2026, 23:43 UK time · 7d ago
2 corroborating sources attached.
Drag to pan · Ctrl / ⌘ + scroll or pinch to zoom4 events
1 quiet check hidden.
Sources
- ESET WeLiveSecurityResearcher
MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration
- The Record from Recorded Future NewsNews
Russian hackers teamed up to wipe data at Ukrainian grain firm
- WeLiveSecurityNews
ESET APT Activity Report Q2 2026–Q3 2026
How we know
Statements extracted from sources. Higher confidence means stronger corroboration.
- ClaimedHeadline60% confidence
ESET APT Activity Report Q2 2026–Q3 2026
- ProbableSummary fact75% confidence
Read Alexandre Côté Cyr and Romain Dumont • 17 Sep 2026 • 17 min. Read The PHP2Shell disclosure and other major cybersecurity news this month brought into relief the need for well-thought-out cyber-readiness plans Editor • 30 Oct 2026 The malware that topped ESET’s infostealer detections in Latin America in the first half of 2026 is an example of how cybercrime has professionalized Mario Micucci • 29 Oct 2026 A critical PHP flaw, leaked Linux kernel reports, a poisoned LiteLL