> TritonInfoSec News
Home / Aug 13, 2026 / Story
0
#8 BleepingComputer general August 11, 2026 at 21:07 UTC

Sandworm hackers target IT pros with trojanized WireGuard VPN client

By Bill Toulas

AI Summary

Russian threat actor Sandworm has been targeting system administrators and IT professionals with fake job offers since at least May 2026, distributing a trojanized WireGuard VPN client as part of the lure. The campaign mirrors Lazarus Group's Operation Dream Job TTPs, underscoring a trend of nation-state actors exploiting IT professionals' trust in open-source tooling.

Read full article → https://www.bleepingcomputer.com/news/security/san…

Relevance score: 81.0/100

# More from August 13

  1. 1
    Microsoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-days BleepingComputer
  2. 2
    Lazarus hackers exploited Windows zero-day to target defense firms BleepingComputer
  3. 3
    Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations The Hacker News
  4. 4
    Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access The Hacker News
  5. 5
    Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws The Hacker News
  6. 6
    Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS The Hacker News
  7. 7
    SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code The Hacker News
  8. 9
    DeadLock ransomware uses blockchain to resist infrastructure takedown BleepingComputer
  9. 10
    Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFA Dark Reading