UNC1151 Ghostwriter Bunny CDN Phishing Proxy via bunnycdn.com/b-cdn.net

Ankit Mehta@Secvyn

•updated Jun 29, 2026•2•0•13

Detects network connections to Bunny CDN infrastructure that contain common URL path indicators associated with phishing, a technique observed in activity attributed to UNC1151 (Ghostwriter).