A New Wave of Cyberattacks from Belarus: Ghostwriter and PicassoLoader in Action!

The cybersecurity world is on alert! Ghostwriter, a malicious actor believed to be linked to Belarus, has launched a new cyberattack campaign. Its targets include Belarusian opposition activists, Ukrainian military personnel, and government institutions.

This dangerous campaign uses Microsoft Excel documents to spread a new variant of malware called PicassoLoader. So who is behind this attack, and what is it targeting?

Who Is Ghostwriter?

Ghostwriter (also known as Moonscape): It is a long-active cyber threat actor believed to be linked to Belarus. It has previously made a name for itself with operations targeting NATO and targets in neighboring countries. Its main goal is to influence public opinion through information manipulation and shape the political agenda.

Details of the Attack: Fake Identities and Malicious Excel Files

Ghostwriter, as in its previous attacks, this time aims to spread disinformation campaigns using social media and email accounts it has compromised. The false information and malicious content shared through these accounts become more convincing because they are shared by real user profiles.

The attackers trick victims with Microsoft Excel files to infect them with malware called PicassoLoader. Once this software infiltrates systems, it can pave the way for more sophisticated attacks.

What Is Ghostwriter’s Goal?

Experts note that Ghostwriter aims to create chaos through such operations, influence political narratives, and support the geopolitical interests of Belarus or Russia.

How Can You Protect Yourself?

To protect yourself from such cyberattacks, it is important to take the following precautions:

• Multi-Factor Authentication (MFA): Enable multi-factor authentication on all your important accounts (email, social media, etc.). This will make it harder for your account to be compromised.
• Be Alert to Suspicious Activity: If you detect suspicious activity on your accounts (logins from unknown devices, strange posts, etc.), immediately change your password and check your security settings.
• Be Wary of Emails from Unknown Sources: Do not click on emails from people you don’t know and do not download suspicious attachments.
• Keep Your Software Up to Date: Regularly update your operating system, antivirus, and other software. This will help close security vulnerabilities.

Being aware of cybersecurity is the best defense against such attacks. Remember, being skeptical will protect you!