UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices wih Malware

Russian state-sponsored threat actors, specifically UAC-0145, a subgroup of the Sandworm hacking unit, are using the ClickFix strategy to spread malware in Ukraine. This tactic tricks targets into infecting their own devices with data-stealing malware. The Computer Emergency Response Team of Ukraine has attributed this activity to UAC-0145, which is affiliated with Russia's GRU. The malware is being distributed using ClickFix CAPTCHAs. UAC-0145 is a known advanced hacking unit. The threat actors are targeting Ukrainian devices with this malware campaign.