CyberSecurityBoardThreat Intel · CVEs · Products
Attack Groups

UNC1151 (Ghostwriter, UAC-0057): Belarus-Aligned Threat Actor

June 27, 2026

UNC1151, also known as Ghostwriter and UAC-0057, is a Belarus-aligned threat actor that conducted spear-phishing campaigns targeting Ukrainian government organizations, delivering the OYSTERBLUES information stealer.