News

Ghostwriter Is Back, Using a Ukrainian Learning Platform as Bait to Hit Government Targets

  • Pierluigi Paganini--Securityaffairs.com
  • published date: 2026-05-23 09:39:32 UTC

Ghostwriter targeted Ukrainian government agencies with phishing emails delivering malware and Cobalt Strike payloads. The Belarus-nexus APT group Ghostwriter (also tracked as UAC-0057 and UNC1151) has resurfaced with a new phishing campaign targeting Ukraini…

Ghostwriter Is Back, Using a Ukrainian Learning Platform as Bait to Hit Government Targets The Belarus-nexus APT group Ghostwriter (also tracked as UAC-0057 and UNC1151) has resurfaced with a new ph… [+4075 chars]