Belarusian State-Sponsored Hackers Carried Out a Wave of Cyberattacks on Email Accounts in Poland
A new wave of cyberattacks targeting Gmail email accounts belonging to Polish citizens has been recorded in Poland. According to information from Polish cybersecurity specialists at CERT Polska, the hacker group UNC1151, also known as Ghostwriter, which is linked to the Belarusian authorities, is behind these actions, writes Onet.pl.

Illustrative photo. Photo: magnific.com
Experts note that this group has remained one of the most active for many years among those whose activities are monitored by CERT Polska. Its main method of operation is phishing attacks – fraudulent attempts to trick people into revealing their password, confirmation code, or other data necessary to access email.
The goal of such campaigns is to gain full access to Gmail users' mailboxes. After the breach, as reported by CERT Polska, the attackers examine the contents of the mailbox and search for information that may be useful to them.
Firstly, they analyze contact lists to find new people against whom further attacks can be organized. In addition, they are interested in important documents, personal or official materials, as well as information about other accounts linked to email, such as social media pages. By gaining access to such accounts, hackers can use them for further attacks, spreading false information, or other malicious activities.
Thus, compromising one email inbox can be just the first stage of a broader cyber operation, as the information obtained from it allows them to select new targets and expand the scale of attacks.
Polish cybersecurity specialists emphasize that the UNC1151/Ghostwriter group continues to pose a serious threat to the Polish information space. Therefore, email users should be especially vigilant: do not open suspicious emails and links, verify the authenticity of login pages, and use additional protection for their accounts, such as two-factor authentication.
Comments