Russia-Linked ‘GreyVibe’ Attackers Use AI to Supercharge Cyberattacks

Researchers have identified a previously undocumented Russia-linked threat actor, dubbed GreyVibe, that uses artificial intelligence tools including ChatGPT and Gemini across all phases of its cyberattack operations.

According to the report, GreyVibe incorporates AI into the entire attack lifecycle, from initial reconnaissance and social engineering to payload development and evasion. The researchers highlighted that the group's integration of AI is comprehensive, affecting every stage of the kill chain.

The emergence of GreyVibe underscores the growing trend of state-sponsored cyber actors adopting commercial AI tools to increase the scale and effectiveness of attacks. It comes as policymakers, including the U.S. A House subcommittee hearing on the topic is scheduled for June 4, in part to examine how such technologies may be misused by adversaries.