{"actor":{"id":"unc1151","name":"UNC1151","aliases":["Ghostwriter","UAC-0107","Moustached Bouncer"],"vendor_names":{"mandiant":"UNC1151","microsoft":"Storm-0257","mitre":"G0146","proofpoint":"TA445","secureworks":"IRON VIKING"},"mitre_gid":"G0146","type":"nation-state","type_verbatim":"nation-state APT","secondary_types":[],"origin":"BY","origins":["BY"],"targets":["AL","BE","BG","CA","CH","CO","CZ","DE","DK","EE","FR","GR","HR","HU","IE","IS","IT","LT","LU","LV","ME","NL","NO","PL","UA"],"target_regions":[],"sectors":["def","edu","gov","leg","med"],"threat_types":["dis","esp"],"mitre_techniques":[],"gir_codes":[],"active_since":2016,"brief":"Belarusian disinformation and credential-theft cluster aligned with Russian objectives.","attribution_sponsor":null,"attribution_confidence":null,"merged_into":null,"split_from":[],"created_at":"2026-05-20T09:50:37.564809+00:00","updated_at":"2026-07-29T08:14:36.331+00:00","url":"https://aptatlas.net/actors/unc1151"},"exports":{"stix":"https://aptatlas.net/api/v1/actors/unc1151/stix","navigator":"https://aptatlas.net/api/v1/actors/unc1151/navigator"}}