As cited
Citation snapshot as of .
threat intel
Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands
Ukrainian authorities attribute a social engineering campaign to UAC-0145, a Sandworm subgroup, targeting IT workers with fake recruitment interviews. The attackers distribute a malicious VPN application capable of executing arbitrary commands on compromised systems.
Why it matters: IT professionals in Ukraine face immediate risk from targeted spear phishing; organizations should train staff to verify recruiter legitimacy and restrict VPN software installation to authorized channels.
- Source published
- First seen by Cybersecurity Tracker