Ghostwriter (749aaa11-f0fd-416b-bf6c-112f9b5930a5)
Ghostwriter is referred as an 'activity set', with various incidents tied together by overlapping behavioral characteristics and personas, rather than as an actor or group in itself.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Ghostwriter (749aaa11-f0fd-416b-bf6c-112f9b5930a5) | Threat Actor | Storm-0257 (60ac9e2c-b3b2-5c6b-913e-935952e14c28) | Microsoft Activity Group actor | 1 |