Computer Emergency Response Team of Ukraine (CERT-UA)

Russian state-sponsored threat actors have used ClickFix CAPTCHAs to trick Ukrainian targets into installing data-stealing malware. The activity is attributed to UAC-0145, a sub-cluster of Sandworm, an advanced hacking unit linked to Russia's GRU.