ESET caught a previously undocumented backdoor tunnelling through Yggdrasil before Sandworm wiped a Ukrainian logistics firm.