Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands
Russian threat group UAC-0145, a Sandworm subgroup, is targeting Ukrainian IT workers with fake job interviews to trick them into installing a malicious VPN that can execute commands.
Ukrainian CERT-UA reports a Russian-linked threat group, UAC-0145 (a Sandworm subgroup), targeting IT workers with fake job interviews. Attackers pose as recruiters to trick victims into installing a malicious VPN capable of executing commands. The campaign uses social engineering to deliver malware.