Diplomatic targets in Central Asia were infected by a firmware implant that exploits an unblocklisted certificate most admins never revoked.
ESET caught a previously undocumented backdoor tunnelling through Yggdrasil before Sandworm wiped a Ukrainian logistics firm.