Belarus-linked hackers target Gmail accounts of Polish public figures and their families
ID: 70dfcf3a-575c-5557-b0a1-ad6c90336004
STIX ID: report--70dfcf3a-575c-5557-b0a1-ad6c90336004
Feed Name: The Record from Recorded Future News
Threat Score
Poland's CERT Polska warns that the Belarus-linked APT GhostWriter (UNC1151/Storm-0257) has shifted phishing operations to target personal Gmail accounts of senior officials, journalists, researchers, and their contacts, using daily-rotating domains to harvest login credentials and two-factor codes for account takeover and influence operations tied to Belarusian state intelligence.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.