ANY.RUN is a leading provider of interactive malware analysis and threat intelligence solutions. The company uncovered the PhantomEnigma campaign by connecting hundreds of sandbox sessions, revealing the operation's broader scope and the use of compromised government infrastructure for malware delivery.