<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Ghostwriter Targets Ukraine Government Entities with Prometheus Phishing Malware]]></title><description><![CDATA[<p>Ghostwriter Targets Ukraine Government Entities with Prometheus Phishing Malware</p><p><div class="card col-md-9 col-lg-6 position-relative link-preview p-0">



<a href="https://thehackernews.com/2026/05/ghostwriter-targets-ukraine-government.html" title="Ghostwriter Targets Ukraine Government Entities with Prometheus Phishing Malware">
<img src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhNDmjcnVzVIqFFB-CQU7L6G8XVTifkZGmIMcPrui1EoffwwvtPXCrjKhRtIfxYsfPb5OUON4KQ1MVRosbP1BgCeFpqIIWRbgv34naUxEUTzyGRsPB6fY2gJJa5AXgT085SLFuc8ykNinXhnnpQzGAT2Kw1YwNe05vxSxlb6EVTu8_CoDws3QwR_SCk7dXm/s1600/ukuk.jpg" class="card-img-top not-responsive" style="max-height: 15rem;" alt="Link Preview Image" />
</a>



<div class="card-body">
<h5 class="card-title">
<a href="https://thehackernews.com/2026/05/ghostwriter-targets-ukraine-government.html">
Ghostwriter Targets Ukraine Government Entities with Prometheus Phishing Malware
</a>
</h5>
<p class="card-text line-clamp-3">Ghostwriter used Prometheus lures since spring 2026 to target Ukraine agencies, enabling malware delivery and data theft.</p>
</div>
<a href="https://thehackernews.com/2026/05/ghostwriter-targets-ukraine-government.html" class="card-footer text-body-secondary small d-flex gap-2 align-items-center lh-2">



<img src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQQyjwPYjJP0wddSEB8Dlpr3dlnQUs52-WmlrZfqJoBPeOvv2Zoqlq-FhEAz_Xeprj_mtrI1MGCW1JS840JUjVEK6VoNe6zCNNTw_7YmyvNmf3E5pprZ3zqP8lszq74Wt97SvbJo5yeuyep0U6-nGs0vdarg4_WUrc5r6L0ML0xE-BsPipJd2-1PMHTvO1/s32-e365/thn.jpg" alt="favicon" class="not-responsive overflow-hiddden" style="max-width: 21px; max-height: 21px;" />

















<p class="d-inline-block text-truncate mb-0">The Hacker News <span class="text-secondary">(thehackernews.com)</span></p>
</a>
</div></p><p>Read on HackerWorkspace: <a href="https://hackerworkspace.com/article/ghostwriter-targets-ukraine-government-entities-with-prometheus-phishing-malware" rel="nofollow noopener"><span>https://</span><span>hackerworkspace.com/article/gh</span><span>ostwriter-targets-ukraine-government-entities-with-prometheus-phishing-malware</span></a></p><p><a href="https://infosec.exchange/tags/malware" rel="tag">#<span>malware</span></a> <a href="https://infosec.exchange/tags/cybersecurity" rel="tag">#<span>cybersecurity</span></a> <a href="https://infosec.exchange/tags/threatintelligence" rel="tag">#<span>threatintelligence</span></a></p>]]></description><link>https://board.circlewithadot.net/topic/1caf533d-2c75-42f9-864c-a5c6b1800327/ghostwriter-targets-ukraine-government-entities-with-prometheus-phishing-malware</link><generator>RSS for Node</generator><lastBuildDate>Mon, 25 May 2026 06:31:12 GMT</lastBuildDate><atom:link href="https://board.circlewithadot.net/topic/1caf533d-2c75-42f9-864c-a5c6b1800327.rss" rel="self" type="application/rss+xml"/><pubDate>Sat, 23 May 2026 09:40:59 GMT</pubDate><ttl>60</ttl></channel></rss>