Foreign embassies in Belarus targeted by cyberespionage group
MoustachedBouncer group likely operating on behalf of Belarusian government
Threat actor using adversary-in-the-middle (AitM) techniques via ISPs
Malware named NightClub, Disco, and SharpDisco used by cyberspies
Belarusian ISPs Unitary Enterprise A1 and Beltelecom possibly involved
MoustachedBouncer group collaborating with Russia-linked group Winter Vivern
Belarusian state-sponsored threat actors using lawful surveillance system SORM
End-to-end encrypted VPN tunnels recommended for organizations in targeted countries