Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands

CERT-UA disclosed a social engineering campaign by Russian nation-state threat actors targeting IT workers in Ukraine. The group, tracked as UAC-0145 and linked to Sandworm, masquerades as recruiters to trick victims into installing malware via fake job interviews. The campaign uses a VPN that can run commands.