Ghostwriter is a state-sponsored threat actor that first emerged around 2016, known for a hybrid approach combining cyber espionage and information operations. The group is assessed with high confidence to be linked to the Belarusian government, with some sources also suggesting potential Russian military intelligence involvement or influence. Their primary motivation is to conduct disinformation campaigns aimed at discrediting NATO, undermining political stability in Eastern Europe, and performing information theft and military influence operations, notably without a clear financial monetization goal. What distinguishes Ghostwriter is its consistent use of compromised websites, social media accounts, and fabricated content, such as fake news articles and falsified correspondence, to spread specific narratives. The group operates under numerous aliases, including UNC1151, TA445, Storm-0257, DEV-0257, PUSHCHA, UAC-0057, FrostyNeighbor, and White Lynx.

Aliases del actor

DEV-0257PUSHCHAStorm-0257TA445UAC-0057UNC1151UAC-0057 o Operation GhostwriterOperation Ghostwriter

Actores similares

Operation Ghostwriterapt · 0uac-0008actor · 1Operation Wocaoapt · 1influence-operationsactor · 1Operation C-Majorapt · 0UAC-0194apt · 0UAC-0185apt · 0Operation Silent Skimmerapt · 0UAC-0020apt · 0Operation Cobalt Whisperapt · 0