Cybersecurity incident — 2022-05-03 00:00:00
Affected organization: High risk individuals in Ukraine
Affected country: Ukraine
Industry: Undetermined
Event type: Exploitive
Event subtype: Exploitation of End Host
Motive: Political-Espionage
Actor: Ghostwriter
Actor type: Nation-State
Actor country: Belarus

Google's Threat Analysis Group reveals that the Belarusian threat actor Ghostwriter has resumed its activity of targeting Gmail accounts via credential phishing.