Opposition advocates in Belarus along with Ukrainian armed forces and governmental bodies are the focus of a recent initiative that utilizes malicious Microsoft Excel files as bait to deploy a fresh strain of PicassoLoader.
The threat group has been evaluated as a continuation of an enduring operation orchestrated by a Belarus-affiliated adversary known as Ghostwriter (also referred to as Moonscape,