Remove viasats-satellite-modems-wiped
article thumbnail

APT trends report Q2 2022

SecureList

In March, Proofpoint published a blog post about a new spear-phishing campaign related to the war in Ukraine, tentatively attributed to the Russian-speaking actor UNC1151 (aka TA445 and Ghostwriter). As part of this process, the actor abused a legitimate blog service to host a malicious script with an encoded format.

Malware 130