New Ghostwriter APT Campaign Targets Ukrainian Government and Belarusian Opposition

The campaign has been in preparation since July-August 2024 and entered the active phase in November-December 2024. Recent malware samples and command-and-control (C2) infrastructure activity indicate that the operation remains active in recent days.