Malware
PhantomRelay
- First Reported
- May 28, 2026
- Latest Reported
- May 29, 2026
Reported Context (3)
- #GREYVIBE WithSecure Details GREYVIBE’s AI-Assisted Campaigns Targeting Ukraine
- Its campaigns use multiple attack chains and tools such as LegionRelay, PhantomRelay, and FallSpy, suggesting a hybrid operation that may blend state-aligned goals with cybercriminal tradecraft. GreyVibe Uses AI-Generated Lures and Custom Malware to Target Ukraine-Linked Organizations
- These would launch a decoy file to take the user’s attention while simultaneously initiating a PhantomRelay (Windows malware) infection chain in the background. WithSecure Details AI-Enabled GreyVibe Campaigns Targeting Ukraine
Malware (3)
People (1)
Threat Actors (3)
MITRE ATT&CK (13)
Products (7)
Tools (8)
Industries (4)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.