espionageThreat Actor
Active Threat
UNC1151
5
IOCs Tracked
4
Intel Reports
Associated IOCs5 total
Related Reports4 total
Ghostwriter Phishing Infrastructure Targets Gmail and Ukrainian Email Portal Users
Cyber PressJun 29, 2026
UNC1151 Ghostwriter Hackers Target Gmail Users With 2FA-Stealing Phishing Campaign
Cyber PressJun 16, 2026
UNC1151/Ghostwriter phishing campaign targeting Gmail accounts
CERT.PLJun 12, 2026
UAC-0057 Attack Detection: OYSTERFRESH, OYSTERSHUCK, and OYSTERBLUES Fuel Phishing Campaigns Against Ukrainian State Organizations
SOC PrimeMay 25, 2026
Threat Profile
Motivationespionage
Last seenJun 2026
IOCs tracked5