thehackernews.com·May 22, 2026
The Belarus-aligned threat actor Ghostwriter has been targeting Ukrainian government organizations by using phishing emails related to the Prometheus online learning platform, as reported by Ukraine's Computer Emergency Response Team (CERT-UA).
The key learning for a cybersecurity professional is that threat actors like Ghostwriter are leveraging localized lures, such as targeting Ukrainian government organizations with phishing emails disguised as communications from the Prometheus online learning platform. This highlights the importance of tailoring threat intelligence and phishing awareness training to include region-specific tactics and platforms that may be exploited by attackers to increase the efficacy of their campaigns.