Tag: picassoloader

2 Attack Reports | 0 Vulnerabilities

Attack reports

Fresh mischief and digital shenanigans

FrostyNeighbor, a cyberespionage group allegedly operating from Belarus and active since at least 2016, continues targeting governmental, military, and key sectors in Eastern Europe, particularly Ukraine, Poland, and Lithuania. Recent activities detected since March 2026 show the group targeting Uk…
spearphishing
belarus
cobalt strike
ukraine
cyberespionage
CVE-2023-38831
CVE-2024-42009
picassoloader
eastern europe
2026-05-21
governmental targeting
Published: May 21, 2026
Downloadable IOCs: 9

Ghostwriter | New Campaign Targets Ukrainian Government and Belarusian Opposition

A new campaign attributed to the Ghostwriter threat actor has been observed targeting opposition activists in Belarus and Ukrainian military and government organizations. The operation, which began preparation in mid-2024 and entered an active phase in late 2024, employs weaponized Excel documents …
cobalt strike
ukraine
2025-02-26
confuserex
unc1151
picassoloader
uac-0057
Published: February 26, 2025
Downloadable IOCs: 10
Click here to see more Attack Reports