A new Ghostwriter campaign is targeting opposition activists in Belarus and Ukrainian military and government organizations.The campaign uses a new variant of PicassoLoader and has been active since late 2024.The Ghostwriter threat actor, linked to the government of Belarus, is known for conducting cyberespionage operations.The campaign confirms the close ties between Ghostwriter and the Belarusian government in targeting opposition and associated organizations.