Ghostwriter (hacker group)
| Formation | c. 2016 |
|---|---|
| Type | threat actor |
| Purpose | Disinformation attack |
| Headquarters | Minsk, Belarus |
Region | Belarus |
| Methods | phishing |
| Affiliations | Armed Forces of Belarus |
Ghostwriter, also known as UNC1151 and Storm-0257 by Microsoft, is a hacker group allegedly originating from Belarus. According to the cybersecurity firm Mandiant, the group has spread disinformation critical of NATO since at least 2016.