Belarus-linked hackers use fake training certificates to target Ukrainian officials

(Daryna Antoniuk – The Record) A Belarus-linked hacking group known as GhostWriter has launched a new espionage campaign against Ukrainian government officials using fake emails disguised as messages from a popular online learning platform to deliver malware. According to Ukraine’s computer emergency response team, CERT-UA, the campaign has been active since the spring of 2026 and has involved phishing emails sent from compromised accounts to employees at government organizations. The emails were disguised as messages from Prometheus, Ukraine’s largest online learning platform, and claimed to offer certificates for completing online courses. Prometheus provides classes ranging from programming and business to public administration and also hosts courses related to military service and drone engineering. – Belarus-linked hackers use fake training certificates to target Ukrainian officials | The Record from Recorded Future News