Breach404
Back to Insights
Cybersecurity2 min readJuly 19, 2026

UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices wih Malware

A Ukrainian threat group known as UAC-0145 is using fake CAPTCHA prompts disguised as security verification tools to deliver malware to devices, exploiting user trust in legitimate-looking security mechanisms. Organizations should train employees to be su

Could your website be vulnerable to attacks like this?

Run a free 10-point security scan on your site — headers, SSL, DNS, and more. Results in 15 seconds.

Test Your Site Now — It's Free