Russia-linked Shuckworm threat group was found targeting Ukrainian organizations with infostealers. The activity is an extension of the attacks that the CERT-UA reported in July. The attackers delivered two backdoors named Pterodo and Giddome. Both are trademarks of Shuckworm tools and are continually enhanced by the attackers to stay hidden.