Excel-lerating cyberattacks.

SentinelLabs reports a Ghostwriter campaign attributed to Belarusian government-linked espionage that actively targets Ukrainian government and military organizations and Belarusian opposition activists using weaponized Excel documents. The researchers observed new malware variants and obfuscated VBA macros that load DLL payloads, with payload delivery apparently tailored by target location and system profile; the operation was prepared in mid-2024 and active by late 2024, representing an escalation that blends disinformation and cyber intrusion.