Tracking some
Ghostwriter (UNC1151, UAC-0057) infrastructure TTP overlaps between the two blogs put out this week byand, original IOCs shared by
1. cyble.com/blog/unc1151-s 2. fortinet.com/blog/threat-re 3. cert.gov.ua/article/5098518
Who can reply?
Accounts @BushidoToken follows or mentioned can reply