Adding to the Border Crisis
News agency RFE/RL has reported that US cybersecurity researchers have uncovered evidence the Belarusian government is linked to a hacking and disinformation campaign against Eastern European NATO members. Researchers with the cybersecurity firm Mandiant confirmed on November 16 that the campaign, known as Ghostwriter, was primarily aimed at sowing discord and stealing information. The researchers said they assessed that the hacking group, which it calls UNC1151, is linked to the Belarusian government, and the group provides technical support to the Ghostwriter campaign and Belarus is also likely at least partially responsible for the Ghostwriter campaign.
Mandiant has tracked UNC1151 since 2017 and issues periodic updates on its activity. The most recent report appears to mark the first time Belarus has been linked to the Ghostwriter campaign. European Union members have previously said they suspected Russian involvement in Ghostwriter. The Mandiant report said it had no direct proof of Russian participation but didn’t rule it out.
Germany’s prosecutor-general in September opened investigations into cyberattacks targeting German politicians, and the German Foreign Ministry blamed them on Moscow. The Belarusian government and the Russian Embassy in Washington did not respond to a request for comment. “Russian officials regularly reject accusations they are involved in hacking and disinformation activity.”
Ben Read, director of cyberespionage analysis at Mandian noted that telltale digital footprints were discovered and multiple other sources corroborated Mandiant’s findings that the hackers likely were located in Minsk. The report also said researchers believe Belarus’s military is involved with the hackers. The reports says the evidence of this has been “directly observed by Mandiant”. The main targets of the hacking and disinformation campaign have been NATO members Poland, Lithuania, and Latvia, as well as Ukraine. The report notes that since the elections in Belarus, Ghostwriter disinformation operations have been more closely aligned to Lukashenko’s political agenda, attempting in particular to create tensions in Polish-Lithuanian relations.
Among the false narratives disseminated were false claims that NATO was planning to withdraw from Lithuania in response to the Covid-19 pandemic and that nuclear waste from Lithuania was threatening Poland.
Mandiant’s findings come as the European Union prepares new sanctions against Belarus over a migrant crisis on its border with Poland, Latvia, and Lithuania.
Radio Free Europe/Radio Liberty via LRT English
