Researchers report that the likely Russia-linked cyber threat cluster known as “GreyVibe” uses artificial intelligence tools such as ChatGPT and Gemini across multiple stages of its attacks. According to the cited findings, the group applies AI to generate and refine lures and other content used to contact victims, then follows with malware and associated tooling tailored for the campaign. The coverage describes the group as conducting operations targeting Ukrainian military and government entities.
While the sources differ slightly in emphasis, they broadly agree that GreyVibe’s activity illustrates how AI can be integrated into real-world cyber operations, from creating plausible messages to supporting technical execution. SecurityWeek frames the behavior as an indicator of how future cybercriminal and state-aligned groups may operate, given the extensive use of AI services. The Register and Bleeping Computer similarly describe a campaign in which AI is used throughout the process, including from initial outreach to payload delivery, alongside custom malware and other operational components.
