threat-intel
Belarus-linked hackers use fake training certificates to target Ukrainian officials
High
Summary
A Belarus-linked hacking group, GhostWriter (UNC1151/Storm-0257), is conducting a new espionage campaign targeting Ukrainian government officials. The operation utilizes sophisticated phishing emails disguised as training certificates from the Prometheus online learning platform to deliver malware. This campaign leverages a multi-stage attack chain culminating in the deployment of Cobalt Strike and the collection of sensitive system information.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data