Cybersecurity organizations usually misjudge caution regarding various threats groups, but Mandiant reports that Ghostwriter is most likely working for the Belarusian government. Additionally, this is the same cybercriminal group that was also linked to UNC115 activities.
Belarus government accused of 'partial responsibility' for Ghostwriter campaigns https://t.co/fqBhfqJGXD by @SecurityCharlie
— ZDNet (@ZDNet) November 16, 2021
This year, Belarus faced sanctions after a commercial plan was forced diverted to the airspace of Belarus to apprehend a journalist named Roman Protasevich. As revenge, President Alexander Lukashenko has been indicted for planning to disrupt the EU.
However, it looks like that the effects of this revelation might go further, especially now that the Ghostwriter program has been attributed to the Belarus government. Also, Russia was accused by the Council of Europe for its involvement with Ghostwriter.
Many cybersecurity researchers came to the same conclusion that Russian interference can not be neglected. However, several pointers suggest that Belarusian interests lie at the core of the movement. private and Government sectors are being targeted in Poland, Ukraine, Latvia, Lithuania, and Germany.
Ghostwriter has also contributed to various attacks on Belarusian rebels, journalists, and other media outlets.
Along with UNC1151, Ghostwriter also supported and spread material against NATO using various methods such as spoofing, hacking websites, and phishing.
UNC1151 also went on to target various Belarusian parliament’s opposition members and media before the elections of 2020. But, interestingly, there were no attacks registered against Russian or Belarus state entities.
According to Mandiant:
Additionally, in several cases, individuals targeted by UNC1151 before the 2020 Belarusian election were later arrested by the Belarusian government.
Most of the Ghostwriter’s operations are usually centered around spreading anti-NATO sentiments. They have continuously spread content that reveals corruption scandals related to NATO, military spreading the Corona Virus, and highlighted Polish and Lithuanian politics corruption.
According to some researchers:
Ghostwriter narratives, particularly those critical of neighboring governments, have been featured on Belarusian state television as fact. We are unable to ascertain whether this is part of a coordinated strategy or if it is simply Belarusian state TV promoting narratives that are consistent with regime interest and being unconcerned with accuracy.
