ESET Report: Lukashenko's Hackers Are Acting In Moscow's Interests

It is possible that they report directly to the Russian intelligence services.

The FrostyNeighbor hacking group, linked to the Belarusian authorities, attacked a critical facility in Ukraine. Cybersecurity experts have discovered that the methods and objectives of Belarusian hackers increasingly align with the priorities of Russian intelligence, which may indicate deepening cooperation between Minsk and Moscow in the cyber domain, writes Dark Reading reports, citing a report by a Slovak international company specializing in cybersecurity ESET for April–September 2026.

The name of the company is not disclosed in the ESET report. It is only stated that it is a manufacturing company of significant importance to Ukraine’s transportation sector. The attack took place in late May. The group, also known as UNC1151, used Chisel, UltraVNC, and Cobalt Strike tools, and then deployed a data-wiping malware capable of destroying data. According to ESET, this is the first documented case of a cyberattack by a group linked to Belarus. The malware may have been used to cover the tracks of a spying operation.

“Belarusian groups act as cyber proxies for Russia,” the report states. Researchers note that their operations increasingly reflect Moscow’s intelligence priorities in Ukraine.

Experts do not rule out the possibility that Belarusian hackers may have been carrying out tasks for Russian intelligence agencies. However, ESET notes that the available data is not yet sufficient to confidently assert direct operational subordination.

The threat also extends to Poland. In June, CERT Polska included UNC1151 among the most active hacking groups it is monitoring; new phishing domains associated with the group appeared almost daily.

You can support the website Charter97.org

MULTI-CURRENCY ACCOUNT FOR ASSISTANCE:

Bank's name: Bank Millennium S.A.
Address: ul. Stanislawa Zaryna, 2A, 02-593, Warszawa
IBAN: PL97116022020000000216711123
SWIFT: BIGBPLPW
Name of the account holder: Fundacja “KARTA ‘97”
Purpose/title of payment: Donation for statuary aims

You can contact us by the e-mail charter97@gmail.com