Threat actor
Ghostwriter
Malpedia BY
Tracked by CyberSIXT since May 14, 2026 · last activity Jul 1, 2026
Linked incidents
Coverage timeline
-
UNC1151 Phishing Campaign Targets Belarus and Ukrainesecurityonline.info · Jul 1, 2026
-
CERT Polska warns of Ghostwriter Gmail phishing aimed at elitessecurityonline.info · Jun 19, 2026
-
Ghostwriter APT Hits Ukraine Gov with Prometheus Phishingsecurityaffairs.com · May 23, 2026
-
Ghostwriter Attack Hits Ukrainian Govt With JS Loadersecurityaffairs.com · May 15, 2026
-
Belarus aligned Ghostwriter hits Ukraine via Ukrtelecom phishingthehackernews.com · May 14, 2026