sandworm

Russian state-sponsored hacking group Sandworm has adopted the Clickfix attack technique to compromise devices in Ukraine, using fake CAPTCHAs to trick users into running malicious PowerShell scripts.