Cybersecurity articles tagged #Sandworm on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/leaked-russian-cyber-ops-training-exposes-institutional-pathwayshttps://runtimerebel.com/blog/leaked-russian-cyber-ops-training-exposes-institutional-pathwaysLeaked materials reveal Russia's institutional system for generating cyber capabilities, linking university recruitment to GRU and Sandworm units for diverse operations.Tue, 01 Sep 2026 19:02:45 GMTGRUSandwormRussiaCyber WarfareAPT28https://runtimerebel.com/blog/sandworm-uac-0145-uses-fake-job-interviews-for-arbitrary-command-executionhttps://runtimerebel.com/blog/sandworm-uac-0145-uses-fake-job-interviews-for-arbitrary-command-executionCERT-UA warns of Sandworm-linked UAC-0145 targeting IT workers with fake job interviews, deploying a modified WireGuard client that executes arbitrary commands.Sun, 16 Aug 2026 16:13:43 GMTSandwormUAC 0145Social EngineeringAPT44WireGuardhttps://runtimerebel.com/blog/sandworm-targets-it-pros-with-trojanized-wireguard-vpn-clienthttps://runtimerebel.com/blog/sandworm-targets-it-pros-with-trojanized-wireguard-vpn-clientRussian threat group Sandworm targets IT professionals using fake job interviews and trojanized WireGuard VPN clients to deliver malware.Wed, 12 Aug 2026 09:03:39 GMTSandwormAPT44UAC 0145TrojanSocial Engineeringhttps://runtimerebel.com/blog/uac-0145-clickfix-strategy-how-sandworm-targets-ukraine-with-malwarehttps://runtimerebel.com/blog/uac-0145-clickfix-strategy-how-sandworm-targets-ukraine-with-malwareRussian threat actor UAC-0145 uses deceptive ClickFix CAPTCHAs to deliver data-stealing malware to Ukrainian targets. Learn how to detect and mitigate these TTPs.Sun, 19 Jul 2026 16:59:50 GMTUAC 0145SandwormClickFixUkraineMalwarePhishinghttps://runtimerebel.com/blog/russian-apts-target-critical-infrastructure-via-edge-device-exploitshttps://runtimerebel.com/blog/russian-apts-target-critical-infrastructure-via-edge-device-exploitsUS and allies warn of Russian state-sponsored actors targeting edge devices to infiltrate critical infrastructure. Learn how to mitigate these threats.Mon, 13 Jul 2026 11:21:02 GMTAPT28SandwormCiscoCritical InfrastructureEdge Securityhttps://runtimerebel.com/blog/russia-s-evolving-influence-ecosystem-global-pivot-ai-integrationhttps://runtimerebel.com/blog/russia-s-evolving-influence-ecosystem-global-pivot-ai-integrationRussia's influence ecosystem pivots from Ukraine-centric operations to global targets, leveraging generative AI and hybrid cyber-IO tactics.Mon, 29 Jun 2026 17:08:38 GMTRussiaInfluence OperationsInformation OperationsHacktivismGenerative AIAPT44SandwormNoName057 16NATOEUCyber Enabled IOhttps://runtimerebel.com/blog/cve-2023-38831-russian-apts-target-ukraine-via-winrar-flawhttps://runtimerebel.com/blog/cve-2023-38831-russian-apts-target-ukraine-via-winrar-flawRussian threat actors are exploiting the CVE-2023-38831 WinRAR vulnerability to target Ukrainian government and military entities for data theft.Tue, 09 Jun 2026 17:01:57 GMTCVE-2023-38831WinRARAPT28SandwormUkrainehttps://runtimerebel.com/blog/geopolitical-exploitation-of-compromised-ip-camerashttps://runtimerebel.com/blog/geopolitical-exploitation-of-compromised-ip-camerasNation-states including Russia and Iran are weaponizing compromised IP cameras for battlefield intelligence and critical infrastructure surveillance.Fri, 27 Mar 2026 16:26:24 GMTIot SecurityIP CamerasSandwormGeopolitical Cyber RiskSurveillance