ClassicBrechasMapaActoresTTP MatrixAnaliticaAlertasCyberNewsArsenalExploitsKillChainOrigenSSLBLRansomLookRansomwhere
Operation Ghostwriter
0 incidentes
0 paises
0 sectores
apt BY Ultimo: -
Aliases: DEV-0257, PUSHCHA, Storm-0257, TA445, UAC-0057, UNC1151, Ghostwriter, UAC-0057 o Operation Ghostwriter
Operation Ghostwriter is a cyber-enabled influence campaign that emerged as early as 2016, although its consistent campaign nature was more widely understood around 2020. Initially focused on anti-NATO narratives, the group has evolved to combine information manipulation with sophisticated cyber espionage and credential theft. It is attributed with high confidence to the Belarusian government, with strong ties to Russia and potential influence from Russian military intelligence. This threat actor distinguishes itself through its unique hybrid warfare approach, meticulously blending propaganda tactics—such as creating fake news articles and personas using compromised websites—with technical intrusions aimed at achieving political objectives, military influence, discrediting NATO, disrupting elections, and weakening Western support for Ukraine. The group is also known by various aliases, including UNC1151, TA445, DEV-0257, Storm-0257, UAC-0057, and PUSHCHA.