GreyVibe

Nation: Russia · 1 tracked threat(s) · Categories: MALWARE

Also known as: GreyVibe cluster, UAC-0098 (ISO-builder/TrickBot overlap), TrickBot-linked operators

Tracked threats

GreyVibe — Russian-Aligned AI-Assisted Espionage vs Ukraine: LegionRelay/PhantomRelay PowerShell RATs & FallSpy Android Spyware (WithSecure) — HIGH

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence