UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices with Malware
Russian state-sponsored threat actors from the UAC-0145 sub-cluster, linked to Sandworm and GRU, are using fake CAPTCHA checks on compromised websites to…
Tag: Sandworm
UAC-0145: Russian Sub-Cluster Linked to Sandworm
UAC-0145 is a sub-cluster within the Sandworm advanced hacking unit, affiliated with Russia's GRU. It has been attributed by CERT-UA to campaigns…
Google Details Turla’s New STOCKSTAY Backdoor Used in Ukraine Espionage Attacks
Google Threat Intelligence Group (GTIG) has attributed a previously undocumented .NET backdoor named STOCKSTAY to the Russian state-sponsored threat actor Turla. The…
Sandworm: GRU-Linked Advanced Hacking Unit
Sandworm is a Russian state-sponsored hacking group associated with the GRU, known for destructive cyber attacks. UAC-0145 is a sub-cluster within Sandworm.