UAC-0145 Uses ClickFix CAPTCHAs to Deliver Malware to Ukrainian Devices

**Executive Summary:** CERT‑UA reports that Russian state-sponsored actor UAC-0145 is deploying the ClickFix social‑engineering technique—fake CAPTCHA prompts that instruct victims to run PowerShell/Run commands—to deliver data‑stealing malware against Ukrainian individuals and organizations, enabling credential and document exfiltration; the advisory outlines why self‑execution bypasses many endpoint defenses and provides mitigations (user training, PowerShell restrictions, logging, EDR rules, and network monitoring).