Mandiant links Belarus to Ghostwriter campaign, which leaked stolen data and pushed disinformation

Reports Mandiant's assessment, with high confidence, that UNC1151 — the group providing technical support to the Ghostwriter campaign — is linked to the Belarusian government, with operators likely located in Minsk and evidence of a link to the Belarusian military. Mandiant could not rule out a Russian contribution but found no direct evidence of one.