Skip to article
Security Alert
Emergent Story mode

Now reading

Overview

1 / 12 3 min 5 sources Multi-Source
Sources

Story mode

Security AlertMulti-Source7 sections

Russia-aligned crime group Greyvibe extensively uses AI in attacks

A Google engineer faces charges, a Russian group uses AI for attacks, and a man is sentenced for selling elder data.

Read
3 min
Sources
5 sources
Domains
2
Sections
7

What Happened A series of significant events have unfolded in the tech and cybersecurity world. A Google security engineer, Michele Spagnuolo, has been charged with insider trading after allegedly using confidential...

Story state
Deep multi-angle story
Evidence
What Happened
Coverage
7 reporting sections
Next focus
What Comes Next

Story step 1

Multi-Source

What Happened

A series of significant events have unfolded in the tech and cybersecurity world. A Google security engineer, Michele Spagnuolo, has been charged...

Step
1 / 7

A series of significant events have unfolded in the tech and cybersecurity world. A Google security engineer, Michele Spagnuolo, has been charged with insider trading after allegedly using confidential company data to place bets on the cryptocurrency-based Polymarket decentralized prediction market. In a separate incident, a North Carolina man, Troy Murray, has been sentenced to over 10 years in prison for selling the personal information of over 7 million elderly Americans to Jamaican scammers.

Continue in the field

Focused storyNearby context

Open the live map from this story.

Carry this article into the map as a focused origin point, then widen into nearby reporting.

Leave the article stream and continue in live map mode with this story pinned as your origin point.

  • Open the map already centered on this story.
  • See what nearby reporting is clustering around the same geography.
  • Jump back to the article whenever you want the original thread.
Open live map mode

Story step 2

Multi-Source

AI-Powered Attacks

Researchers have uncovered a previously undocumented Russian group, dubbed Greyvibe, that makes extensive use of large language models (LLMs) in its...

Step
2 / 7

Researchers have uncovered a previously undocumented Russian group, dubbed Greyvibe, that makes extensive use of large language models (LLMs) in its attacks against private, government, and military organizations in Ukraine. The group uses a variety of attack vectors along with custom malware, with the goal of intelligence gathering for the ongoing war. Greyvibe's first campaign was launched in August 2025, with a series of spear phishing emails that purported to come from a legitimate source.

Story step 3

Multi-Source

Cybersecurity Disclosures

A public and personal exchange has erupted between Microsoft and a prominent cybersecurity researcher, Nightmare Eclipse, about what responsible...

Step
3 / 7

A public and personal exchange has erupted between Microsoft and a prominent cybersecurity researcher, Nightmare Eclipse, about what responsible cybersecurity disclosures should mean in 2026. The researcher posted that he had tried to contact Microsoft officials and was rebuffed, which led him to publish details about the bugs. Microsoft has since deleted the researcher's GitHub account.

Story step 4

Multi-Source

Key Facts

Who: Michele Spagnuolo, Google security engineer; Troy Murray, North Carolina man; Greyvibe, Russian-aligned group What: Insider trading charges;...

Step
4 / 7
  • Who: Michele Spagnuolo, Google security engineer; Troy Murray, North Carolina man; Greyvibe, Russian-aligned group
  • What: Insider trading charges; selling elder data; AI-powered attacks
  • When: October 2025 (Spagnuolo's alleged insider trading); 2016-2023 (Murray's data selling); August 2025 (Greyvibe's first campaign)
  • Impact: $1.2 million in alleged insider trading profits; 7 million elderly Americans affected by data selling; unknown impact of Greyvibe's attacks

Story step 5

Multi-Source

What Experts Say

While the activities align with Russian state interests, several observed indicators suggest the group has ties to the broader cybercrime ecosystem,...

Step
5 / 7
"While the activities align with Russian state interests, several observed indicators suggest the group has ties to the broader cybercrime ecosystem, with the group potentially involving current or former cybercriminal actors," said WithSecure researchers about Greyvibe.

Story step 6

Multi-Source

Key Numbers

7 million: Number of elderly Americans affected by Troy Murray's data selling

Step
6 / 7
  • 7 million: Number of elderly Americans affected by Troy Murray's data selling

Story step 7

Multi-Source

What Comes Next

As the tech and cybersecurity world continues to evolve, it is essential to stay vigilant about potential threats and attacks. The use of AI in...

Step
7 / 7

As the tech and cybersecurity world continues to evolve, it is essential to stay vigilant about potential threats and attacks. The use of AI in attacks, like those carried out by Greyvibe, raises concerns about the future of cybersecurity. The case of Michele Spagnuolo serves as a reminder of the importance of responsible cybersecurity disclosures and the consequences of insider trading.

Source bench

Multi-Source

5 cited references across 2 linked domains.

References
5
Domains
2

5 cited references across 2 linked domains.

  1. Source 1 · Fulqrum Sources

    Russia-aligned crime group Greyvibe extensively uses AI in attacks

  2. Source 2 · Fulqrum Sources

    Man sent to prison for selling data of 7 millions elderly Americans

  3. Source 3 · Fulqrum Sources

    US charges Google security engineer with Polymarket insider trading

Open source workbench

Keep reporting

ContradictionsEvent arcNarrative drift

Open the deeper evidence boards.

Take the mobile reel into contradictions, event arcs, narrative drift, and the full source workspace.

  • Scan the cited sources and coverage bench first.
  • Open contradiction and narrative drift checks after the first read.
  • Revisit the core evidence in What Happened.
Open evidence boards

Stay in the reporting trail

Open the evidence boards, source bench, and related analysis.

Jump from the app-style read into the deeper workbench without losing your place in the story.

Open source workbenchBack to Security Alert
🔒 Security Alert

Russia-aligned crime group Greyvibe extensively uses AI in attacks

A Google engineer faces charges, a Russian group uses AI for attacks, and a man is sentenced for selling elder data.

Tuesday, June 2, 2026 • 3 min read • 5 source references

  • 3 min read
  • 5 source references

What Happened

A series of significant events have unfolded in the tech and cybersecurity world. A Google security engineer, Michele Spagnuolo, has been charged with insider trading after allegedly using confidential company data to place bets on the cryptocurrency-based Polymarket decentralized prediction market. In a separate incident, a North Carolina man, Troy Murray, has been sentenced to over 10 years in prison for selling the personal information of over 7 million elderly Americans to Jamaican scammers.

AI-Powered Attacks

Researchers have uncovered a previously undocumented Russian group, dubbed Greyvibe, that makes extensive use of large language models (LLMs) in its attacks against private, government, and military organizations in Ukraine. The group uses a variety of attack vectors along with custom malware, with the goal of intelligence gathering for the ongoing war. Greyvibe's first campaign was launched in August 2025, with a series of spear phishing emails that purported to come from a legitimate source.

Cybersecurity Disclosures

A public and personal exchange has erupted between Microsoft and a prominent cybersecurity researcher, Nightmare Eclipse, about what responsible cybersecurity disclosures should mean in 2026. The researcher posted that he had tried to contact Microsoft officials and was rebuffed, which led him to publish details about the bugs. Microsoft has since deleted the researcher's GitHub account.

Key Facts

  • Who: Michele Spagnuolo, Google security engineer; Troy Murray, North Carolina man; Greyvibe, Russian-aligned group
  • What: Insider trading charges; selling elder data; AI-powered attacks
  • When: October 2025 (Spagnuolo's alleged insider trading); 2016-2023 (Murray's data selling); August 2025 (Greyvibe's first campaign)
  • Impact: $1.2 million in alleged insider trading profits; 7 million elderly Americans affected by data selling; unknown impact of Greyvibe's attacks

What Experts Say

"While the activities align with Russian state interests, several observed indicators suggest the group has ties to the broader cybercrime ecosystem, with the group potentially involving current or former cybercriminal actors," said WithSecure researchers about Greyvibe.

Key Numbers

  • 7 million: Number of elderly Americans affected by Troy Murray's data selling

What Comes Next

As the tech and cybersecurity world continues to evolve, it is essential to stay vigilant about potential threats and attacks. The use of AI in attacks, like those carried out by Greyvibe, raises concerns about the future of cybersecurity. The case of Michele Spagnuolo serves as a reminder of the importance of responsible cybersecurity disclosures and the consequences of insider trading.

Story pulse
Story state
Deep multi-angle story
Evidence
What Happened
Coverage
7 reporting sections
Next focus
What Comes Next

What Happened

A series of significant events have unfolded in the tech and cybersecurity world. A Google security engineer, Michele Spagnuolo, has been charged with insider trading after allegedly using confidential company data to place bets on the cryptocurrency-based Polymarket decentralized prediction market. In a separate incident, a North Carolina man, Troy Murray, has been sentenced to over 10 years in prison for selling the personal information of over 7 million elderly Americans to Jamaican scammers.

AI-Powered Attacks

Researchers have uncovered a previously undocumented Russian group, dubbed Greyvibe, that makes extensive use of large language models (LLMs) in its attacks against private, government, and military organizations in Ukraine. The group uses a variety of attack vectors along with custom malware, with the goal of intelligence gathering for the ongoing war. Greyvibe's first campaign was launched in August 2025, with a series of spear phishing emails that purported to come from a legitimate source.

Cybersecurity Disclosures

A public and personal exchange has erupted between Microsoft and a prominent cybersecurity researcher, Nightmare Eclipse, about what responsible cybersecurity disclosures should mean in 2026. The researcher posted that he had tried to contact Microsoft officials and was rebuffed, which led him to publish details about the bugs. Microsoft has since deleted the researcher's GitHub account.

Key Facts

  • Who: Michele Spagnuolo, Google security engineer; Troy Murray, North Carolina man; Greyvibe, Russian-aligned group
  • What: Insider trading charges; selling elder data; AI-powered attacks
  • When: October 2025 (Spagnuolo's alleged insider trading); 2016-2023 (Murray's data selling); August 2025 (Greyvibe's first campaign)
  • Impact: $1.2 million in alleged insider trading profits; 7 million elderly Americans affected by data selling; unknown impact of Greyvibe's attacks

What Experts Say

"While the activities align with Russian state interests, several observed indicators suggest the group has ties to the broader cybercrime ecosystem, with the group potentially involving current or former cybercriminal actors," said WithSecure researchers about Greyvibe.

Key Numbers

  • 7 million: Number of elderly Americans affected by Troy Murray's data selling

What Comes Next

As the tech and cybersecurity world continues to evolve, it is essential to stay vigilant about potential threats and attacks. The use of AI in attacks, like those carried out by Greyvibe, raises concerns about the future of cybersecurity. The case of Michele Spagnuolo serves as a reminder of the importance of responsible cybersecurity disclosures and the consequences of insider trading.

Coverage tools

Sources, context, and related analysis

Visual reasoning

How this briefing, its evidence bench, and the next verification path fit together

A server-rendered QWIKR board that keeps the article legible while showing the logic of the current read, the attached source bench, and the next high-value reporting move.

Cited sources

0

Reasoning nodes

3

Routed paths

2

Next checks

1

Reasoning map

From briefing to evidence to next verification move

SSR · qwikr-flow

Story geography

Where this reporting sits on the map

Use the map-native view to understand what is happening near this story and what adjacent reporting is clustering around the same geography.

Geo context
0.00° N · 0.00° E Mapped story

This story is geotagged, but the nearby reporting bench is still warming up.

Continue in live map mode

Coverage at a Glance

5 sources

Compare coverage, inspect perspective spread, and open primary references side by side.

Linked Sources

4

Distinct Outlets

2

Viewpoint Center

Not enough mapped outlets

Outlet Diversity

Very Narrow
0 sources with viewpoint mapping 0 higher-credibility sources 1 reference without direct URL
Coverage is still narrow. Treat this as an early map and cross-check additional primary reporting.

Coverage Gaps to Watch

  • Thin mapped perspectives

    Most sources do not have mapped perspective data yet, so viewpoint spread is still uncertain.

  • No high-credibility anchors

    No source in this set reaches the high-credibility threshold. Cross-check with stronger primary reporting.

Read Across More Angles

Source-by-Source View

Search by outlet or domain, then filter by credibility, viewpoint mapping, or the most-cited lane.

Showing 4 of 4 cited sources with links.

1 citation-only reference will appear once direct links are available.

Unmapped Perspective (4)

bleepingcomputer.com

Man sent to prison for selling data of 7 millions elderly Americans

Open

bleepingcomputer.com

Unmapped bias Credibility unknown Dossier
bleepingcomputer.com

US charges Google security engineer with Polymarket insider trading

Open

bleepingcomputer.com

Unmapped bias Credibility unknown Dossier
csoonline.com

Russia-aligned crime group Greyvibe extensively uses AI in attacks

Open

csoonline.com

Unmapped bias Credibility unknown Dossier
csoonline.com

Microsoft and security researcher’s dueling posts about cybersecurity disclosures get nasty

Open

csoonline.com

Unmapped bias Credibility unknown Dossier
Fact-checked Real-time synthesis Bias-reduced

This article was synthesized by Fulqrum AI from 5 trusted sources, combining multiple perspectives into a comprehensive summary. All source references are listed below.