OTX Threat: MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration

On July 16th, 2025, UAC-0099 conducted a spearphishing attack against a Ukrainian grain logistics company, deploying the MATCHWOK backdoor. The following day, attackers introduced MythicRatatoskr, a previously undocumented Go-based backdoor utilizing the Yggdrasil mesh network for command and control communications. This decentralized network enables end-to-end encrypted IPv6 traffic between nodes Sectors: Agriculture