CERT24Ghostwriter targets Ukrainian government entities with Prometheus phishing malwareLoading data…
CERT24Threat Observatory
Period

Ghostwriter targets Ukrainian government entities with Prometheus phishing malware

According to CERT-UA, the Belarus-aligned threat actor Ghostwriter uses lures related to the Prometheus online learning platform to target government organizations in Ukraine. Phishing emails are sent from compromised accounts and typically contain a PDF attachment with a link to download a ZIP archive.

← Back to intelligence

Ghostwriter targets Ukrainian government entities with Prometheus phishing malware

According to CERT-UA, the Belarus-aligned threat actor Ghostwriter uses lures related to the Prometheus online learning platform to target government organizations in Ukraine. Phishing emails are sent from compromised accounts and typically contain a PDF attachment with a link to download a ZIP archive.