Home · Wiki · Incidents & Campaigns
type: incident · created: 2026-10-29 · updated: 2026-10-29 · tags: [incident, defence, espionage] · confidence: high · severity: high · affected_sectors: [defence] · au_impact: true

ESET researchers report an "unprecedented operational convergence" between Russian and Belarus-aligned hacking campaigns in recent months, with Belarus-linked activity increasingly reflecting Russia's intelligence priorities in Ukraine. The most significant development: in late May, the Belarusian intelligence-linked group GhostWriter launched a destructive wiper attack against a Ukrainian manufacturing company tied to the country's transportation sector — the first destructive cyberattack by a Belarus-aligned group ESET has documented in Europe, one it says sets a precedent for other Belarus-linked actors. ESET could not establish whether the malware was aimed at damage or cover for espionage. The finding widens the Five Eyes threat picture beyond Russian and DPRK actors: allied states and their critical-infrastructure supply chains now face a second, operationally integrated state-nexus adversary on Russia's flank.

Attribute Detail
Sector Defence
Date 2026-10-29
Source The Record
Reliability Tier 2