Ukrainian government, Belarusian opposition targeted in new espionage campaign

A SentinelOne-linked report attributes an ongoing (mid‑2024 onward) cyber espionage campaign to GhostWriter, a Belarusian state‑linked APT, targeting Belarusian opposition activists and Ukrainian government and military entities using phishing lures and malware (notably a modified PicassoLoader, Agent Tesla, Cobalt Strike Beacon, and njRAT); the campaign represents the first documented direct targeting of Belarusian opposition and indicates state-aligned objectives.