Netskope Threat Labs

MALWARE-CNC UNC1151.GhostWriter phishing JSP font masquerade inbound

IPS-SWG

1 SID: 180064

First seen
September 2026
Last seen
September 2026

Detects phishing activity designed to steal credentials associated with the UNC1151.GhostWriter malware family.