UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices wih Malware

Russian state-sponsored threat actors from UAC-0145, a sub-cluster within Sandworm affiliated with GRU, are using ClickFix CAPTCHAs to trick Ukrainian targets into infecting their own machines with data-stealing malware. The Computer Emergency Response Team of Ukraine (CERT-UA) attributed the activity to this advanced hacking unit, which continues to target Ukrainian systems.