Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2023-06-16 ⋅ SOC Prime ⋅ Veronika Telychko
PicassoLoader and Cobalt Strike Beacon Detection: UAC-0057 aka GhostWriter Hacking Group Attacks the Ukrainian Leading Military Educational Institution
Cobalt Strike PicassoLoader Ghostwriter
2023-04-13 ⋅ Intel 471 ⋅ Jorge Rodriguez, Souhail Hammou
From GhostNet to PseudoManuscrypt - The evolution of Gh0st RAT
BBSRAT Gh0stTimes Ghost RAT PseudoManuscrypt
2022-08-25 ⋅ ⋅ SK Shieldus ⋅ SK Shieldus
Ghost Ransomware Response and Attack Analysis Report
Gwisin
2022-07-19 ⋅ ⋅ CERT Poland ⋅ CERT Poland
Development of UNC1151/Ghostwriter attack techniques
2022-03-18 ⋅ Recorded Future ⋅ Insikt Group®
Ghostwriter in the Shell: Expanding on Mandiant’s Attribution of UNC1151 to Belarus
2022-03-08 ⋅ Cluster25 ⋅ Cluster25
GhostWriter / UNC1151 adopts MicroBackdoor Variants in Cyber Operations against Ukraine
MicroBackdoor
2022-02-28 ⋅ Bleeping Computer ⋅ Sergiu Gatlan
Meta: Ukrainian officials, military targeted by Ghostwriter hackers
Ghostwriter
2022-02-28 ⋅ Bleeping Computer ⋅ Sergiu Gatlan
Meta: Ukrainian officials, military targeted by Ghostwriter hackers
Ghostwriter
2022-02-25 ⋅ 360 netlab ⋅ Ghost
Some details of the DDoS attacks targeting Ukraine and Russia in recent days
Bashlite Mirai MooBot PerlBot
2022-02-25 ⋅ RiskIQ ⋅ RiskIQ
RiskIQ: UNC1151/GhostWriter Phishing Attacks Target Ukrainian Soldiers
2022-02-25 ⋅ ⋅ 360 netlab ⋅ Ghost
Details of the DDoS attacks we have seen recently against Ukraine and Russia
Bashlite Mirai Mirai
2021-11-16 ⋅ Mandiant ⋅ Alden Wahlstrom, Alice Revelli, Ben Read, David Mainor, Gabriella Roncone, Mandiant Research Team, Sam Riddell
UNC1151 Assessed with High Confidence to have Links to Belarus, Ghostwriter Campaign Aligned with Belarusian Government Interests
Ghostwriter
2021-11-16 ⋅ Wired ⋅ Lily Hay Newman
‘Ghostwriter’ Looks Like a Purely Russian Op - Except It's Not
2021-10-29 ⋅ 360 netlab ⋅ Ghost
Pink, a botnet that competed with the vendor to control the massive infected devices
Pink
2021-10-06 ⋅ Cybereason ⋅ Assaf Dahan, Chen Erlich, Daniel Frank, Tom Fakterman
Operation GhostShell: Novel RAT Targets Global Aerospace and Telecoms Firms
ShellClient RAT
2021-09-30 ⋅ Kaspersky Labs ⋅ Kaspersky Labs
GhostEmperor’s infection chain and post-exploitation toolset: technical detail
GhostEmperor GhostEmperor
2021-09-30 ⋅ Kaspersky ⋅ Aseel Kayal, Mark Lechtik, Paul Rascagnères, Vasily Berdnikov
GhostEmperor: From ProxyLogon to kernel mode
GhostEmperor GhostEmperor
2021-09-01 ⋅ Prevailion ⋅ Prevailion
Diving Deep into UNC1151’s Infrastructure: Ghostwriter and beyond
2021-08-13 ⋅ vsquare ⋅ Anna Gielewska, Julia Dauksza
The Ghostwriter Scenario (UNC1151)
2021-07-29 ⋅ Kaspersky ⋅ Kaspersky
GhostEmperor: Chinese-speaking APT targets high-profile victims using unknown rootkit
GhostEmperor