CERT24New Russia-linked GREYVIBE targets Ukraine with AI-powered cyberattacks
The previously undocumented threat actor GREYVIBE has been linked to ongoing and persistent attacks against Ukraine and Ukraine-related entities since at least August 2025. WithSecure assesses that the group is Russian-speaking, operates broadly in the Russian time zone, and that its activity aligns with Kremlin interests, particularly intelligence gathering directed at Ukraine. The exact nature of the group’s relationship with the Russian state remains unclear.