negativeSYS.SOURCE: The Hacker News• 2026-08-12T00:06:47+05:30

Sandworm-Linked UAC-0145 Exploits Social Engineering via Fake Job Interviews to Deploy Malicious VPN

#social engineering #malware #vpn #wireguard #cybersecurity

A Russian nation-state threat group, UAC-0145 linked to Sandworm, uses social engineering via fake job interviews with AI-generated personas to deploy a malicious VPN. The modified WireGuard-based SopraVPN allows attackers to execute arbitrary commands on victim systems through PowerShell and scheduled tasks.

The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new social engineering campaign orchestrated by Russian nation-state threat actors targeting IT workers in the country by masquerading as recruiters to trick them into installing malware.

CERT-UA pinned the activity on a threat cluster it tracks as UAC-0145, which is a subgroup within Sandworm (aka APT44,

Read original article

*** END OF TRANSMISSION ***

> OPTIMIZING LLM OUTPUT EFFICIENCY THROUGH HISTORICAL TELEGRAPHESE COMPRESSION TECHNIQUES > CISO INSIGHTS REVEAL CYBER RISK SHIFTS TOWARD INTERNAL WORKFLOWS > FBI WARNS OF ONGOING FORTIBLEED CAMPAIGN TARGETING FORTINET DEVICES WITH 86,644 CREDENTIALS COMPROMISED > CRITICAL ATLASSIAN DATA CENTER VULNERABILITY CVE-2026-21589 EXPLOITED WITHIN TWO HOURS OF DISCLOSURE > AGENTIC PENTESTING: PROOFS, LIMITATIONS, AND CONTINUOUS VALIDATION CHALLENGES > CHROME INTEGRATES JPEG XL FOR ENHANCED IMAGE COMPRESSION > EXPLOITING LARGE LANGUAGE MODELS AND DATA POISONING TO MANIPULATE CONSENSUS > ADVANCEMENTS IN SYNTHETIC BIOLOGY ENABLE CREATION OF MIRROR-LIFE ORGANISMS > CANADIAN STUDY WARNS PERMANENT DAYLIGHT SAVING TIME POSES RISKS TO SLEEP AND MENTAL HEALTH > RISING PS5 JAILBREAKS POSE SIGNIFICANT SECURITY CHALLENGES> OPTIMIZING LLM OUTPUT EFFICIENCY THROUGH HISTORICAL TELEGRAPHESE COMPRESSION TECHNIQUES > CISO INSIGHTS REVEAL CYBER RISK SHIFTS TOWARD INTERNAL WORKFLOWS > FBI WARNS OF ONGOING FORTIBLEED CAMPAIGN TARGETING FORTINET DEVICES WITH 86,644 CREDENTIALS COMPROMISED > CRITICAL ATLASSIAN DATA CENTER VULNERABILITY CVE-2026-21589 EXPLOITED WITHIN TWO HOURS OF DISCLOSURE > AGENTIC PENTESTING: PROOFS, LIMITATIONS, AND CONTINUOUS VALIDATION CHALLENGES > CHROME INTEGRATES JPEG XL FOR ENHANCED IMAGE COMPRESSION > EXPLOITING LARGE LANGUAGE MODELS AND DATA POISONING TO MANIPULATE CONSENSUS > ADVANCEMENTS IN SYNTHETIC BIOLOGY ENABLE CREATION OF MIRROR-LIFE ORGANISMS > CANADIAN STUDY WARNS PERMANENT DAYLIGHT SAVING TIME POSES RISKS TO SLEEP AND MENTAL HEALTH > RISING PS5 JAILBREAKS POSE SIGNIFICANT SECURITY CHALLENGES