#cobalt-strike

Nation-State Threats

Ghostwriter's Prometheus Play: Ukraine Govt Targeted with New Phishing Malware

Belarusian threat actor Ghostwriter is leveraging Ukraine's own Prometheus learning platform as a fresh vector for phishing attacks against the nation's government entities. The sophisticated operation employs a multi-stage JavaScript payload designed for deep system reconnaissance and Cobalt Strike deployment.

Nation-State Threats

FrostyNeighbor's New Tactics Emerge in 2026

FrostyNeighbor is back, and this time it's bringing updated mischief. The cyberespionage group, allegedly tied to Belarus, has launched fresh campaigns in 2026, showcasing a disturbingly adaptable playbook against governmental targets.

Nation-State Threats

Ghostwriter's Geofenced PDFs: Ukraine Faces New Cyber Offensive

The persistent Belarus-aligned Ghostwriter threat group has escalated its operations, now employing geofenced PDF phishing targeting Ukraine's government. This sophisticated approach aims to evade detection and deploy potent malware.