Operation Phantom Enigma is a threat campaign tracked by ThreatCluster, appearing in 1 threat cluster built from 1 intelligence report mention.
Operation Phantom Enigma is a threat campaign tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed July 22, 2026; most recent activity July 22, 2026.
The PhantomEnigma malware campaign has compromised over 20 Brazilian government websites, using them to deliver malware targeting banking and public-sector organizations. Attackers exploited legitimate government email…
Operation Phantom Enigma is a threat campaign tracked by ThreatCluster, appearing in 1 threat cluster built from 1 intelligence report mention.
The most recent intelligence report mentioning Operation Phantom Enigma on ThreatCluster is dated July 22, 2026.
Across ThreatCluster reporting, Operation Phantom Enigma most frequently co-occurs with Malware, Phishing, PhantomEnigma, Banco Do Brasil, Polícia Civil, among 12 tracked related entities.
The most significant recent cluster is “PhantomEnigma Campaign Hijacks Brazilian Gov Websites for Malware Delivery” (2 articles · Updated July 22, 2026). Operation Phantom Enigma appears across 1 threat cluster in total, listed above with sources.
Operation Phantom Enigma appears in 1 intelligence report mention across 1 deduplicated threat cluster, aggregated from 17,000+ monitored sources.