APT ATLAS

Atlas Actors147 Names471 Sectors40 Requirements480

⌘K

Atlas Actors147 Names471 Sectors40 Requirements480

UNC1151 (aka Ghostwriter, UAC-0107) · APT Atlas

Actors/Nation-state / APT/Europe

UNC1151

G0146APTBY · Belarus

AKA Ghostwriter · UAC-0107 · Moustached Bouncer

Microsoft: Storm-0257MITRE: G0146Proofpoint: TA445Secureworks: IRON VIKING

Belarusian disinformation and credential-theft cluster aligned with Russian objectives.

Targets25

Sectors5

Threat types2

GIRs covered0/480

Active since2016

QUICK FACTS

TypeNation-state / APT

OriginBelarus

First seen2016

Type (verbatim)nation-state APT

GIR coverage0/480

TTPs0

Targets25

Sectors5

Last reviewed2026-07-29

Also tracked as

5 vendor names · 3 other aliases

Open Rosetta Stone

Mandiant

UNC1151

Microsoft

Storm-0257

MITRE

G0146

Proofpoint

TA445

Secureworks

IRON VIKING

UNATTRIBUTED ALIASESGhostwriterUAC-0107Moustached Bouncer

Victimology

Geographic footprint · 25 countries

origin · Belarustargeted countries · 25

EUROPE · 23

Albania · Belgium · Bulgaria · Switzerland · Czechia · Germany · Denmark · Estonia · France · Greece · Croatia · Hungary · Ireland · Iceland · Italy · Lithuania · Luxembourg · Latvia · Montenegro · Netherlands · Norway · Poland · Ukraine

AMERICAS · 2

Canada · Colombia

Sectors targeted

5 of 40

Government100 actors Defense72 actors Education & Research62 actors Media & Journalism49 actors Legal & Professional18 actors

Tactics, techniques, procedures

Threat types + MITRE ATT&CK mapping

THREAT TYPES

DIS · DisinformationESP · Espionage

MITRE ATT&CK · 0 techniques

No TTPs mapped yet.

GIR coverage

0 / 480 requirements satisfied

Open matrix

No GIRs mapped yet for this actor.

Open data

Machine-readable exports of this profile

JSON · RESTActor recordFull profile via the public v1 API STIX 2.1Intrusion-set bundleDeterministic ids · techniques + targeted countries ATT&CK NAVIGATORTechnique layer0 techniques · layer format 4.5

Related actors

By origin and actor type

APT31nation-state

China · 6 targets · since 2013

APT8nation-state

China · 5 targets · since —

APT24nation-state

China · 3 targets · since 2008

APT27nation-state

China · 23 targets · since 2010

APT44nation-state

Russia · 25 targets · since 2009

APT21nation-state

China · 5 targets · since 2010