FrostyNeighbor is a apt_group tracked across 2 threat clusters and 5 intelligence report mentions on ThreatCluster. First observed May 14, 2026; most recent activity May 15, 2026.
The Belarus-aligned cyber group FrostyNeighbor has launched a targeted campaign against government organizations in Ukraine and Poland since March 2026. Utilizing spearphishing techniques, the group delivers malicious…
The Ghostwriter group, also known as FrostyNeighbor, has resumed cyber attacks targeting Ukrainian government organizations as of March 2026. ESET researchers have documented this activity, which involves phishing…