July 1, 2026
- UNC1151 (Ghostwriter) is running targeted Gmail phishing lures themed around "suspicious account activity," with public domain-hunting and campaign analysis available. resident.ngo / Censys · Jul 1 · observed · via phishing email · as unc1151 · Threat Activity