UAC-0002

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenAug 12, 2026
Last mentionedAug 12, 2026

Timeline

1 articles · newest first

Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands

CERT-UA says Sandworm-linked UAC-0145 poses as recruiters in fake job interviews to deliver a trojanized WireGuard VPN that runs attacker commands on victims' hosts.

The Hacker NewsAug 12, 13:45 UTC · Aug 12, 2026Threat actor3 · 1 read

Appears with

CERT-UAvendor · 1
APT44threat actor · 1
Sandwormthreat actor · 1
GRUorganization · 1
Sopra Steria Bulgariavictim · 1
SopraVPNmalware · 1
UAC-0145threat actor · 1
SopraVPNproduct · 1
ATLAS Business Grouporganization · 1
CERT-UAorganization · 1
Telegramproduct · 1
WireGuardproduct · 1
Sopra Steria Bulgariaorganization · 1
WireGuardvendor · 1
ATLAS Business Groupvictim · 1
Zoomproduct · 1

Entities are extracted by the model from each article. First seen Aug 12, 2026, last mentioned Aug 12, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.