Phantom Enigma Campaign Used Familiar Tools in Unfamiliar Ways

In early 2025, a sophisticated cyber campaign known as Phantom Enigma initiated a series of targeted phishing attacks, with its primary focus on Brazil before subsequently affecting several other countries. Disguised as routine invoice emails and armed with malicious browser extensions for Chrome, Edge, and Brave, the attackers skillfully blended social engineering with repurposed remote access tools to quietly compromise systems. With over 700 malicious downloads and a trail of infiltrated corporate servers, Phantom Enigma is a stark reminder of the escalating threat posed by modern, multi-layered phishing operations.