中文翻译

摘要: Home

Cyber Security News

GREYVIBE Hackers Leverage ChatGPT and Google Gemini to Fuel Cyberattacks

May 30, 2026

GREYVIBE hackers are increasingly leveraging generative AI tools such as...

正文

Cyber Security News

GREYVIBE Hackers Leverage ChatGPT and Google Gemini to Fuel Cyberattacks

May 30, 2026

GREYVIBE hackers are increasingly leveraging generative AI tools such as

ChatGPT and Google Gemini

to enhance cyberattack operations.

The campaign, active since at least August 2025, primarily targets Ukraine and related entities across the government, military, and civilian sectors, highlighting a growing convergence between artificial intelligence and modern cyber warfare.

WithSecure researchers identified GREYVIBE as a previously untracked threat group exhibiting consistent overlaps in infrastructure, tooling, and operational behavior across multiple campaigns.

While no definitive attribution has been established, the group’s activities strongly align with Russian state interests, particularly intelligence-gathering objectives linked to the ongoing Russia-Ukraine conflict.

Supporting evidence includes Russian-language artifacts, Moscow time zone activity patterns, and targeting aligned with Ukrainian institutions.

GREYVIBE Abuses ChatGPT, Gemini AI

GREYVIBE employs a multi-vector attack strategy, combining

spear-phishing emails

, fake CAPTCHA verification pages, and fraudulent websites to distribute malware.

In spear-phishing campaigns, attackers impersonate Ukrainian government agencies and distribute malicious archives via cloud services such as Google Drive.

These payloads execute decoy documents while silently initiating infection chains using custom loaders.

Another notable tactic involves

fake CAPTCHA pages

designed to trick victims into executing malicious commands under the guise of verification steps.

Additionally, the group operates deceptive “adult club” websites targeting Ukrainian individuals, particularly military personnel.

Example of fake captcha site and prompted instructions (Ukrainian) (Source: Withsecure labs)

These platforms not only deliver malware such as FallSpy for Android and PhantomRelay for W

来源: Brave/cybersecuritynews.com

采集时间: 2026-05-30 20:16:24