Click here to download all references as Bib-File.•
| 2021-04-28
⋅
FireEye
⋅
Ghostwriter Update: Cyber Espionage Group UNC1151 Likely Conducts Ghostwriter Influence Activity |
| 2021-03-31
⋅
Twitter (@hatr)
⋅
Tweet on Ghostwriter Ghostwriter |
| 2021-03-31
⋅
⋅
Tagesschau
⋅
Attack of the "chaos troops" (Ghostwriter) |
| 2021-03-26
⋅
⋅
Der Spiegel
⋅
Russian group "Ghostwriters" apparently attacked parliamentarians |
| 2021-01-26
⋅
SophosLabs Uncut
⋅
Nefilim Ransomware Attack Uses “Ghost” Credentials Nefilim |
| 2021-01-26
⋅
Team Cymru
⋅
GhostDNSbusters (Part 3) Illuminating GhostDNS Infrastructure |
| 2021-01-18
⋅
Arete
⋅
Egregor: The Ghost of Soviet Bears Past Haunts On Egregor |
| 2020-10-07
⋅
Team Cymru
⋅
GhostDNSbusters (Part 2) |
| 2020-09-25
⋅
Netlab
⋅
Ghost in action: the Specter botnet Specter |
| 2020-09-08
⋅
Team Cymru
⋅
GhostDNSbusters: Illuminating GhostDNS Infrastructure |
| 2020-07-29
⋅
FireEye
⋅
'Ghostwriter' Influence Campaign: Unknown Actors Leverage Website Compromises and Fabricated Content to Push Narratives Aligned With Russian Security Interests Ghostwriter |
| 2020-07-29
⋅
Mandiant
⋅
‘Ghostwriter’ Influence Campaign: Unknown Actors Leverage Website Compromises and Fabricated Content to Push Narratives Aligned with Russian Security Interests |
| 2020-07-02
⋅
AhnLab
⋅
Malicious Hangul Word Processor Files Exploiting Ghostscript Vulnerability |
| 2020-05-20
⋅
Avast Decoded
⋅
GhostDNS Source Code Leaked |
| 2019-10-17
⋅
ESET Research
⋅
OPERATION GHOST The Dukes aren’t back — they never left FatDuke |
| 2019-10-17
⋅
ESET Research
⋅
Operation Ghost: The Dukes aren’t back – they never left PolyglotDuke |
| 2019-09-19
⋅
Trend Micro
⋅
Fileless Cryptocurrency-Miner GhostMiner Weaponizes WMI Objects, Kills Other Cryptocurrency-Mining Payloads GhostMiner |
| 2019-03-28
⋅
Malware Explorer Blog
⋅
10 Years Since Ghostnet Gh0stnet |
| 2019-01-01
⋅
Council on Foreign Relations
⋅
Operation GhostSecret Lazarus Group |
| 2018-09-24
⋅
Github (GhostPack)
⋅
Github Repo for Rubeus Rubeus |