Threat Intelligence / Actor / Ghostwriter (UAC-0057 / UNC1151)

Ghostwriter (UAC-0057 / UNC1151)

Nation: Belarus · 1 tracked threat(s) · Categories: APT

Also known as: UAC-0057, UNC1151, Ghostwriter, TA445, Storm-0257, Moonscape

Tracked threats

Ghostwriter (UAC-0057 / UNC1151) Prometheus-Themed Phishing Chain Drops OYSTERFRESH → OYSTERBLUES → OYSTERSHUCK → Cobalt Strike Against Ukrainian Government — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence