Sandworm fake job malware WireGuard Ukraine: Russia's GRU ran a fake recruitment campaign targeting Ukrainian system administrators, hiding root-level malware inside a trojanized WireGuard VPN client ...

Sandworm fake recruiter campaign targets Ukrainian IT workers with SopraVPN, a trojanized WireGuard app that hides AES-encrypted attack commands in VPN config files, not the binary. CERT-UA issued its ...