Formation | c. 2016 |
---|---|
Type | threat actor |
Purpose | Disinformation attack |
Headquarters | Minsk, Belarus[1] |
Region | Belarus |
Methods | phishing |
Affiliations | Armed Forces of Belarus[1] |
Ghostwriter, also known as UNC1151 and Storm-0257 by Microsoft,[2] is a hacker group allegedly originating from Belarus. According to the cybersecurity firm Mandiant, the group has spread disinformation critical of NATO since at least 2016.[3]