Aired in the Ship Log episode of 2026-10-09. This page is the public record for the story: every fact the show was allowed to assert, with its verbatim source sentence — and every reply and correction, unedited.
| Claim | Source sentence (verbatim) | Source |
|---|---|---|
| The Russia-aligned threat actor UAC-0099 has been attributed to a previously undocumented .NET infostealer and remote access trojan codenamed ASHVEIN. | “The Russia-aligned threat actor known as UAC-0099 has been attributed to a previously undocumented .NET infostealer and remote access trojan (RAT) codenamed ASHVEIN.” | The Hacker News |
| According to TrendAI, the ASHVEIN malware has been used in attacks targeting Ukrainian government personnel. | “According to TrendAI, the malware has been put to use in attacks targeting Ukrainian government personnel.” | The Hacker News |
| TrendAI tracks the cluster under the name Earth Sirrush, previously called SHADOW-EARTH-065. | “The cybersecurity company is tracking the cluster under the name Earth Sirrush (previously SHADOW-EARTH-065).” | The Hacker News |
| UAC-0099 is a Russia-aligned threat actor. | “The Russia-aligned threat actor known as UAC-0099” | The Hacker News |
| ASHVEIN is a previously undocumented .NET infostealer and remote access trojan. | “a previously undocumented .NET infostealer and remote access trojan (RAT) codenamed ASHVEIN” | The Hacker News |
| TrendAI is a cybersecurity company. | “The cybersecurity company is tracking the cluster under the name Earth Sirrush” | The Hacker News |
Your reply is published verbatim — we do not edit it — and read on air in the next episode, in the same flat voice for every party. We may decline a reply that is abusive, off-topic, or not from the party named; declines are logged. Replies go to a human first; nothing posts automatically.