English Section

Poland targeted in ‘Ghostwriter’ cyber ops campaign: US security firm

23.06.2021 13:31
Poland was targeted in a cyber operations campaign dubbed "Ghostwriter", US cybersecurity company Mandiant Intelligence has said, as cited by Polish state news agency PAP.
Image: S. Hermann  F. RichterPixabay
Image: S. Hermann & F. Richter/Pixabay Pixabay licence

A Polish official said on Tuesday that security services have linked recent hacker attacks that hit his country, including on public officials in Poland, to Russian secret services.

Stanisław Żaryn, spokesman for Poland’s security services chief, said the findings of counterintelligence units showed that over 4,000 accounts of Polish e-mail users were targeted in recent “social engineering attacks”.

Żaryn added: “All the information obtained so far indicates that the actions of the UNC1151 group, which have affected Poland in recent weeks, are part of the ‘Ghostwriter’ campaign, the aim of which is to destabilize the political situation in the countries of Central Europe.”

The UNC1151 group was first identified by US cybersecurity company Mandiant Intelligence, which also dubbed operations by the group as the "Ghostwriter" campaign, PAP reported.

But Mandiant Intelligence has not yet gathered sufficient evidence to attribute recent attacks to a specific country, according to PAP.

The cyber attacks against Poland will be discussed at a meeting of the North Atlantic Council in Brussels on Wednesday, PAP has reported.

Attack aimed to ‘destabilize’ Poland

The head of Poland’s ruling conservatives said on Friday that top officials, ministers, and MPs in his country from various political parties had been targeted by a cyber attack launched from Russian territory.

Jarosław Kaczyński, leader of the governing Law and Justice party, said the attack aimed to destabilize Poland.

Officials said earlier this month that investigators were probing a hacker attack on the social media and email accounts of the prime minister’s top aide, Michał Dworczyk, amid suspicions that Russia was behind the incident.

Dworczyk said he considered the cyberattack to be a part of a wider “disinformation campaign” against Poland.

(pk)

Source: PAP