A threat actor previously linked to the Belarusian Ministry of Defense, Ghostwriter, has recently adopted nearly invisible Browser-in-the-Browser (BitB) credential phishing techniques. The tool is likely being leveraged in its attacks against Ukraine and exploitation of the war being waged in the country. Ghostwriter is currently using war-themed attacks to

Ukraine’s Computer Emergency Response Team (CERT-UA) has warned of continuing phishing and Ghostwriter activities targeting Ukrainian organizations. According to the team, Ghostwriter is primarily focusing on targets in Belarus, Russia, Poland, and Ukraine and is believed to be of Belarusian origin. According to CERT-UA, Ghostwriter’s members are officers of the

Security firm FireEye released a report on Wednesday detailing the activity of a disinformation group it has dubbed “Ghostwriter.” The group has been creating and disseminating disinformation since at least March 2017. Ghostwriter primarily focuses on undermining NATO and the US troops in Poland and the Baltics. Ghostwriter has posted