PhantomEnigma is a threat campaign tracked by ThreatCluster, appearing in 1 threat cluster built from 2 intelligence report mentions.
PhantomEnigma is a threat campaign tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed July 21, 2026; most recent activity July 22, 2026.
The PhantomEnigma malware campaign has compromised over 20 Brazilian government websites, using them to deliver malware targeting banking and public-sector organizations. Attackers exploited legitimate government email…
PhantomEnigma is a threat campaign tracked by ThreatCluster, appearing in 1 threat cluster built from 2 intelligence report mentions.
The most recent intelligence report mentioning PhantomEnigma on ThreatCluster is dated July 22, 2026. Activity was first observed July 21, 2026, giving a tracked span from then to July 22, 2026.
Across ThreatCluster reporting, PhantomEnigma most frequently co-occurs with Malware, Phishing, Operation Phantom Enigma, Banco Do Brasil, Polícia Civil, among 12 tracked related entities.
The most significant recent cluster is “PhantomEnigma Campaign Hijacks Brazilian Gov Websites for Malware Delivery” (2 articles · Updated July 22, 2026). PhantomEnigma appears across 1 threat cluster in total, listed above with sources.
PhantomEnigma appears in 2 intelligence report mentions across 1 deduplicated threat cluster, aggregated from 17,000+ monitored sources.