Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Deploy Malicious VPN Client
The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed a new social engineering campaign attributed to UAC-0145, a subgroup of the…
Tag: Sandworm
UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices with Malware
Russian state-sponsored threat actors from the UAC-0145 sub-cluster, linked to Sandworm and GRU, are using fake CAPTCHA checks on compromised websites to…
UAC-0145: Sandworm Subgroup Behind Social Engineering Campaigns
UAC-0145 is a threat cluster tracked by CERT-UA, identified as a subgroup within the Sandworm APT group. It has been active since…
Google Details Turla’s New STOCKSTAY Backdoor Used in Ukraine Espionage Attacks
Google Threat Intelligence Group (GTIG) has attributed a previously undocumented .NET backdoor named STOCKSTAY to the Russian state-sponsored threat actor Turla. The…
Sandworm: Russian GRU-Linked Cyber Espionage Group
Sandworm, also known as APT44, Seashell Blizzard, and UAC-0002, is a sophisticated hacking group affiliated with the GRU, Russia's military intelligence agency.…