Back to IntelRead Original Source
Intel Node
Ghostwriter Targets Ukrainian Government With Geofenced PDF Phishing, Cobalt Strike
lowadvisory2026-05-14T14:00:37+00:00source excerpt
tradecraftemail
Source excerpt · The upstream feed supplied only part of this article.Read the original source →
The Belarus-aligned threat group known as Ghostwriter has been attributed to a fresh set of attacks targeting governmental organizations in Ukraine. Active since at least 2016, Ghostwriter has been linked to both cyber espionage and influence operations targeting neighboring countries, particularly Ukraine.