Ghostwriter Targets Ukrainian Government With Geofenced PDF Phishing, Cobalt Strike

iT4iNT SERVER The Belarus-aligned threat group known as Ghostwriter has been attributed to a fresh set of attacks targeting governmental organizations in Ukraine.
Active since at least 2016, Ghostwriter has been linked to both cyber espionage and influence operations targeting neighboring countries, particularly Ukraine. It's also tracked under the monikers FrostyNeighbor, PUSHCHA, Storm-0257, TA445, UAC‑0057 VDS VPS Cloud


http://dlvr.it/TSXjf9