diff --git a/Ghostwriter/README.MD b/Ghostwriter/README.MD
new file mode 100644
index 0000000..4ca8cd7
--- /dev/null
+++ b/Ghostwriter/README.MD
@@ -0,0 +1,7 @@
+https://www.fireeye.com/blog/threat-research/2021/04/espionage-group-unc1151-likely-conducts-ghostwriter-influence-activity.html
+
+https://www.fireeye.com/blog/threat-research/2020/07/ghostwriter-influence-campaign.html
+
+https://www.tagesschau.de/investigativ/wdr/hackerangriffe-105.html
+
+https://content.fireeye.com/web-assets/rpt-unc1151-ghostwriter-update