SopraVPN: Malicious WireGuard-Based VPN Client
SopraVPN is a trojanized VPN client distributed by UAC-0145 via SourceForge. It is compiled from WireGuard source code with modifications that allow…
Tag: UAC-0145
Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Deploy Malicious VPN Client
The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed a new social engineering campaign attributed to UAC-0145, a subgroup of the…
UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices with Malware
Russian state-sponsored threat actors from the UAC-0145 sub-cluster, linked to Sandworm and GRU, are using fake CAPTCHA checks on compromised websites to…
UAC-0145: Sandworm Subgroup Behind Social Engineering Campaigns
UAC-0145 is a threat cluster tracked by CERT-UA, identified as a subgroup within the Sandworm APT group. It has been active since…