As cited
Citation snapshot as of .
threat intel
Russian military hackers pose as recruiters to target Ukrainian IT workers
Ukraine's CERT-UA has identified a campaign running since at least May in which Russian military hackers from Sandworm pose as recruiters to target Ukrainian IT workers. The operation is attributed to the GRU's notorious hacking unit. The group uses social engineering and impersonation to reach victims in the technology sector.
Why it matters: Ukrainian IT workers and organizations are being targeted by a state-sponsored group using recruitment pretexts; practitioners should brief staff on GRU credential theft tactics and alert networks for signs of compromise among employees contacted by suspicious recruiters.
- Source published
- First seen by Cybersecurity Tracker