Dossier
Sandworm
Coverage of Sandworm in the Nexus archive.
- UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices wih Malware
Russian state-sponsored threat actors have used ClickFix CAPTCHAs to trick Ukrainian targets into installing data-stealing malware. The activity is attributed to UAC-0145, a sub-cluster of Sandworm, an advanced hacking unit linked to Russia's GRU.