Ghostwriter is referred as an 'activity set', with various incidents tied together by overlapping behavioral characteristics and personas, rather than as an actor or group in itself.
Also known as
UNC1151, TA445, PUSHCHA, Storm-0257, DEV-0257, UAC-0057.
References
- fireeye.com
- twitter.com
- mandiant.com
- bleepingcomputer.com
- blog.google
- blog.google
- bsi.bund.de
- socprime.com
- socprime.com
- cert.gov.ua
Actor metadata imported from Malpedia (Fraunhofer FKIE).