article thumbnail

Ukraine: Belarusian APT group UNC1151 targets military personnel with spear phishing

Security Affairs

Unlike other disinformation campaigns, GhostWriter doesn’t spread through social networks, instead, threat actors behind this campaign abused compromised content management systems (CMS) of news websites or spoofed email accounts to disseminate fake news. Follow me on Twitter: @securityaffairs and Facebook. Pierluigi Paganini.

Military 102
article thumbnail

Ghost Squad Hackers defaced a second European Space Agency (ESA) site in a week

Security Affairs

Their attempt to patch the vulnerability was a fail even after removing their CMS and adding a maintenance index we were still able to get access. ” According to the hackers, the ESA experts have yet to fix the problem, they only removed the installation of the CMS. ” the hackers told me. ” the hackers said. .

CMS 97
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

German Parliament Bundestag targeted again by Russia-linked hackers

Security Affairs

The attackers are suspected to be hackers of the tracked as Ghostwriter group that works under the control of the Russian military secret service GRU. The messages were sent by threat actors to the private emails of the German politicians. “The Bundestag has again become the target of alleged Russian hackers.

article thumbnail

Mandiant links Ghostwriter operations to Belarus

Security Affairs

Unlike other disinformation campaigns, GhostWriter doesn’t spread through social networks, instead, threat actors behind this campaign abused compromised content management systems (CMS) of news websites or spoofed email accounts to disseminate fake news.

Military 103
article thumbnail

GhostWriter APT targets state entities of Ukraine with Cobalt Strike Beacon 

Security Affairs

Unlike other disinformation campaigns, GhostWriter doesn’t spread through social networks, instead, threat actors behind this campaign abused compromised content management systems (CMS) of news websites or spoofed email accounts to disseminate fake news. CERT-UA also published Indicators of Compromise for the recent campaign.

article thumbnail

Ghostwriter disinformation campaign aimed at discrediting NATO

Security Affairs

Unlike other disinformation campaigns, GhostWriter doesn’t spread through social networks, instead, threat actors behind this campaign abused compromised content management systems (CMS) of news websites or spoofed email accounts to disseminate fake news.

article thumbnail

Security Affairs newsletter Round 309

Security Affairs

Clop Ransomware operators plunder US universities Malware attack on Applus blocked vehicle inspections in some US states 2,5M+ users can check whether their data were exposed in Facebook data leak 33.4%