UAC-0145 is a threat cluster tracked by CERT-UA, identified as a subgroup within the Sandworm APT group. It has been active since at least May 2026, conducting social engineering campaigns targeting IT workers in Ukraine. The group uses fake job interviews and malicious VPN clients to compromise systems.