Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands

Ukrainian cybersecurity authorities have revealed a social engineering campaign by Russian threat actors targeting IT workers in Ukraine. The attackers pose as recruiters and use fake job interviews to trick victims into installing malware. The campaign is attributed to UAC-0145, a subgroup of the Sandworm threat actor group. The malware being pushed is a virtual private network that has the capability to run commands. The attackers are targeting IT workers in Ukraine with this campaign.