CYBERSECURITYTRACKER
TRACKING3,967 stories737 vuln stories
Permanent story citation

Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands

The story is preserved as cited. Later corrections remain visibly typed and adjacent to the original snapshot.

← newsStory 4250

As cited

Citation snapshot as of .

threat intel

Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands

Ukrainian authorities attribute a social engineering campaign to UAC-0145, a Sandworm subgroup, targeting IT workers with fake recruitment interviews. The attackers distribute a malicious VPN application capable of executing arbitrary commands on compromised systems.

Why it matters: IT professionals in Ukraine face immediate risk from targeted spear phishing; organizations should train staff to verify recruiter legitimacy and restrict VPN software installation to authorized channels.

Source published
First seen by Cybersecurity Tracker

Source attribution