Cybersecurity & Data Protection
1
UPVOTE
thehackernews.com

UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices wih Malware

Russian state-sponsored threat actors have been observed leveraging the infamous ClickFix strategy to trick Ukrainian targets into infecting their own machines with data-stealing malware. According to the Computer Emergency Response Team of Ukraine (CERT-UA), the activity has been attributed to UAC-0145, a sub-cluster within Sandworm, an advanced hacking unit affiliated with GRU, Russia's
UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices wih Malware
TN

The Hacker News

2d ago
1 0

Discussion

Take the lead—comment now

Lead the way—your insights can inspire others.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

JO

jordan af

jordan afUpvoted 2d ago0 comments · 65 shares

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

thehackernews.com
Apple Fixes Hide My Email Bug That Exposed Real Addresses in Ma…

Apple has moved to address a security flaw in its Hide My Email service that enabled users' real email addresses to be unmasked, effectively undermining the fe…
Golden Greta

Golden Greta

30m ago
0
thehackernews.com
Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass…

Threat actors have been observed exploiting a now-patched high-severity Palo Alto Networks PAN-OS vulnerability as an entry point to deploy Qilin (aka Agenda)…
JA

jordan af

5h ago
0
schneier.com
MIT to Become Hotbed of AI Video Surveillance

It’s a lot: According to information obtained by The Tech, MIT is spending over $3 million on more than 500 AI surveillance cameras in academic buildings…
SS

Schneier on Security

8h ago
0
bleepingcomputer.com
US seizes over 1,000 websites in FIFA World Cup piracy crackdow…

The U. S. Justice Department has seized more than 1, 000 websites and blocked 1, 970 domains used to stream FIFA World Cup 2026 matches without authorization.…
EK

Emma Klein

8h ago
0
bleepingcomputer.com
Critical Palo Alto VPN bug now exploited by Qilin ransomware ga…

The Qilin ransomware gang is exploiting a critical PAN-OS GlobalProtect authentication bypass flaw to breach victims' networks, according to cybersecurity comp…
Rosa Martinez

Rosa Martinez

9h ago
0
thehackernews.com
WordPress wp2shell Exploitation Grows as Public Exploit Fuels M…

Attackers have begun to exploit two critical vulnerabilities in WordPress that, when combined together, enable unauthenticated remote code execution (RCE) and…
Noor Bakker

Noor Bakker

10h ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
Apple Fixes Hide My Email Bug That Exposed Real Addresses in Ma…

Apple has moved to address a security flaw in its Hide My Email service that enabled users' real email addresses to be unmasked, effectively undermining the fe…
Golden Greta

Golden Greta

30m ago
0
thehackernews.com
Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass…

Threat actors have been observed exploiting a now-patched high-severity Palo Alto Networks PAN-OS vulnerability as an entry point to deploy Qilin (aka Agenda)…
JA

jordan af

5h ago
0
thehackernews.com
WordPress wp2shell Exploitation Grows as Public Exploit Fuels M…

Attackers have begun to exploit two critical vulnerabilities in WordPress that, when combined together, enable unauthenticated remote code execution (RCE) and…
Noor Bakker

Noor Bakker

10h ago
0
thehackernews.com
FakeGit Campaign Uses 7,600 GitHub Repositories to Spread Smart…

Cybersecurity researchers have discovered nearly 7, 600 malicious GitHub repositories, out of which more than 800 pose as artificial intelligence (AI) skills o…
Thanakorn Boon

Thanakorn Boon

1d ago
0
thehackernews.com
World's Largest AI Model Repository Hugging Face Breached by Au…

In an ironic twist, open-source artificial intelligence (AI) platform Hugging Face revealed that it was the victim of a hack perpetrated by an autonomous AI ag…
TN

The Hacker News

1d ago
0
thehackernews.com
New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers…

An anonymous HTTP request can run code on a WordPress site. The bug is in core, so a bare install with zero plugins is exploitable. Every 6. 9 and 7. 0 site w…
RM

ryan maybe

3d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest