ESET: Belarus-linked FrostyNeighbor wipes Ukrainian transport manufacturer
UNC1151 used Chisel, UltraVNC, Cobalt Strike and a VBScript wiper delivered through Group Policy.
74
Threat actor
FrostyNeighbor
- Mentions · 7d2
- Mentions · 30d2
- All mentions2
- First seenOct 30, 2026
- Last mentioned11h ago
Timeline
2 articles · newest firstGhostWriter linked to first Belarus data wipe at Ukrainian firm
ESET ties FrostyNeighbor to the wipe and says Belarus-aligned operators increasingly mirror Russian priorities in Ukraine.
64
Appears with
- ESETorganization · 2
- DHSvictim · 1
- Zawoomalware · 1
- Zenith Technologyvictim · 1
- Federal Election Commissionvictim · 1
- Cobalt Strikemalware · 1
- Chiselmalware · 1
- UNC1151threat actor · 1
- Binancevictim · 1
- Bithumbvictim · 1
- Department of Peacethreat actor · 1
- GhostWriterthreat actor · 1
- UltraVNCmalware · 1
- Coinbasevictim · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.