CYBERSECURITYTRACKER
TRACKING3,967 stories737 vuln stories
Permanent story citation

Sandworm hackers have a CAPTCHA trick for Ukrainians

The story is preserved as cited. Later corrections remain visibly typed and adjacent to the original snapshot.

← newsStory 2699

As cited

Citation snapshot as of .

threat intel

Sandworm hackers have a CAPTCHA trick for Ukrainians

Sandworm, a Russian state-sponsored hacking group, is distributing a malicious CAPTCHA that tricks Ukrainian users into executing a PowerShell command on their Windows systems. The fake verification appears legitimate but actually delivers malware when users follow the embedded instructions.

Why it matters: Ukrainian organizations and individuals are at direct risk of compromise through this social engineering attack; security teams should warn users to verify CAPTCHA legitimacy and avoid copying unfamiliar commands from web forms.

Source published
First seen by Cybersecurity Tracker

Source attribution