Click here to download all references as Bib-File.
| 2022-03-18 ⋅ Recorded Future ⋅ Ghostwriter in the Shell: Expanding on Mandiant’s Attribution of UNC1151 to Belarus |
| 2022-03-08 ⋅ Cluster25 ⋅ GhostWriter / UNC1151 adopts MicroBackdoor Variants in Cyber Operations against Ukraine MicroBackdoor |
| 2022-02-28 ⋅ Bleeping Computer ⋅ Meta: Ukrainian officials, military targeted by Ghostwriter hackers Ghostwriter |
| 2022-02-25 ⋅ RiskIQ ⋅ RiskIQ: UNC1151/GhostWriter Phishing Attacks Target Ukrainian Soldiers |
| 2022-02-25 ⋅ 360 netlab ⋅ Some details of the DDoS attacks targeting Ukraine and Russia in recent days Bashlite Mirai MooBot PerlBot |
| 2022-02-25 ⋅ 360 netlab ⋅ Details of the DDoS attacks we have seen recently against Ukraine and Russia Bashlite Mirai Mirai |
| 2021-11-16 ⋅ Mandiant ⋅ UNC1151 Assessed with High Confidence to have Links to Belarus, Ghostwriter Campaign Aligned with Belarusian Government Interests Ghostwriter |
| 2021-11-16 ⋅ Wired ⋅ ‘Ghostwriter’ Looks Like a Purely Russian Op - Except It's Not |
| 2021-10-29 ⋅ 360 netlab ⋅ Pink, a botnet that competed with the vendor to control the massive infected devices Pink |
| 2021-10-06 ⋅ Cybereason ⋅ Operation GhostShell: Novel RAT Targets Global Aerospace and Telecoms Firms ShellClient RAT |
| 2021-09-30 ⋅ Kaspersky ⋅ GhostEmperor: From ProxyLogon to kernel mode GhostEmperor |
| 2021-09-01 ⋅ Prevailion ⋅ Diving Deep into UNC1151’s Infrastructure: Ghostwriter and beyond |
| 2021-08-13 ⋅ vsquare ⋅ The Ghostwriter Scenario (UNC1151) |
| 2021-07-29 ⋅ Kaspersky ⋅ GhostEmperor: Chinese-speaking APT targets high-profile victims using unknown rootkit GhostEmperor |
| 2021-07-27 ⋅ Gigamon ⋅ Ghosts on the Wire: Expanding Conceptions of Network Anomalies SUNBURST |
| 2021-06-24 ⋅ Fortinet ⋅ The Ghosts of Mirai Mirai |
| 2021-06-15 ⋅ Elastic ⋅ What you need to know about Process Ghosting, a new executable image tampering attack |
| 2021-04-28 ⋅ FireEye ⋅ Ghostwriter Update: Cyber Espionage Group UNC1151 Likely Conducts Ghostwriter Influence Activity |
| 2021-03-31 ⋅ Tagesschau ⋅ Attack of the "chaos troops" (Ghostwriter) |
| 2021-03-31 ⋅ Twitter (@hatr) ⋅ Tweet on Ghostwriter Ghostwriter |