Ghostwriter (hacker group)

Ghostwriter
Formationc. 2016
Typethreat actor
PurposeDisinformation attack
HeadquartersMinsk, Belarus[1]
Region
Belarus
Methodsphishing
AffiliationsArmed Forces of Belarus[1]

Ghostwriter, also known as UNC1151 and Storm-0257 by Microsoft,[2] is a hacker group allegedly originating from Belarus. According to the cybersecurity firm Mandiant, the group has spread disinformation critical of NATO since at least 2016.[3]

  1. ^ a b Satter, Raphael (2022-02-25). "Ukraine says its military is being targeted by Belarusian hackers". Reuters. Retrieved 2022-03-07.
  2. ^ "How Microsoft names threat actors". Microsoft. Retrieved 21 January 2024.
  3. ^ "Ghostwriter Update: Cyber Espionage Group UNC1151 Likely Conducts Ghostwriter Influence Activity | Mandiant". www.mandiant.com. Retrieved 2022-03-02.