Skip to content
Threat Feed
Subscribe

Actor

UAC-0145

1 brief RSS
high threat

UAC-0145 Uses ClickFix CAPTCHAs to Distribute Data-Stealing Malware

Russian state-sponsored threat actor UAC-0145 (Sandworm sub-cluster) is actively targeting Ukrainian organizations by using fake ClickFix CAPTCHAs on compromised websites to trick users into executing malicious PowerShell commands, leading to the deployment of data-stealing malware on Windows and Android devices.

UAC-0145 malware state-sponsored data-theft social-engineering windows android ukraine backdoor
2r 9t