Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Deploy Malicious VPN Client
The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed a new social engineering campaign attributed to UAC-0145, a subgroup of the…
Tag: GRU
UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices with Malware
Russian state-sponsored threat actors from the UAC-0145 sub-cluster, linked to Sandworm and GRU, are using fake CAPTCHA checks on compromised websites to…
GRU: Russian Foreign Military Intelligence Agency
The GRU is Russia's primary foreign military intelligence agency, which sponsors advanced hacking units like Sandworm and its sub-clusters such as UAC-0145.
U.S. Sanctions First VPN Service and Cryptor Seller for Ransomware Support
The U.S. Treasury Department's OFAC has sanctioned First VPN Service (1VPNS), its Ukrainian administrator Dmytro Rashevskyi, and Belarusian national Yegeniy Vladimirovich Silayev…
GRU Unit 29155 Cyber Division
A cyber division of Russia's Main Intelligence Directorate (GRU) known for recruiting hackers and cyber specialists from Russian universities, collaborating with cybercriminals…
IMPULS Company
A company linked to GRU Unit 29155, involved in recruiting hackers and cyber specialists from Russian universities for cyber operations. Sanctioned by…
Sandworm: Russian GRU-Linked Cyber Espionage Group
Sandworm, also known as APT44, Seashell Blizzard, and UAC-0002, is a sophisticated hacking group affiliated with the GRU, Russia's military intelligence agency.…
APT28 (Fancy Bear / Forest Blizzard)
Russian GRU-linked group whose tradecraft overlaps with CaptiveCrunch, but attribution was not made due to lack of direct technical linkage.