Russian Hacking Group GreyVibe Abuses Generative AI to Target Ukrainian Organizations

The Russia-Ukraine war has extended into cyberspace, with Ukraine's military, government and businesses facing sustained attacks from Russian hackers. Cybersecurity firm WithSecure said GreyVibe has incorporated generative AI and large language models (LLMs) into malware development, showing how AI is lowering barriers to creating attack code and automating operations.

WithSecure recently disclosed that GreyVibe had systematically used generative AI to conduct three types of attacks against Ukrainian targets. A June 3 cybersecurity bulletin also detailed the related threats. Researchers assessed that its LegionRelay malware was highly likely to have been developed with assistance from an LLM, indicating that the group relies heavily on AI tools.