20+ Brazilian Gov Sites Hijacked as PhantomEnigma Malware Channels

Fri, 17 Jul 2026 12:06:10 +0000

Engineer — Skip
SOC/IR — Learn: PhantomEnigma’s use of hijacked government websites as delivery infrastructure is a notable TTP worth tracking, but the summary surfaces no IOCs, Sigma rules, or ATT&CK mappings to act on yet — monitor ANY.RUN’s full report for detection artifacts.
Leader — Skip

Campaign on CuraSec