ElevenLabs: AI Voice Generation
ElevenLabs is a company that provides AI-powered text-to-speech and voice generation. The p1bot.io vishing-as-a-service platform uses ElevenLabs' text-to-speech capabilities to generate IVR…
Tag: vishing
CallFlow: AI-Driven Vishing Component
CallFlow is an advanced AI-driven vishing component used by the Balonx Sistema PhaaS operation. It automates voice fraud via synthetic speech and…
Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes
Cybersecurity researchers have uncovered a phishing-as-a-service (PhaaS) platform called AnonyMousKIT that uses AI voice agents to trick owners of stolen Apple devices…
Mirage Security Analyzes Subscription Vishing Service
Mirage Security analyzed a subscription vishing service with commercial text-to-speech, providing insights into the evolution of AI-driven phishing.
Vapi: Commercial Voice Platform Abused in AI Vishing
Vapi, a commercial voice platform, was used by AnonyMousKIT to deploy AI voice agents impersonating Apple Support. The platform's features enabled scalable…
ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 13 More Stories
This week's ThreatsDay Bulletin covers a wide range of cybersecurity developments, including new attack techniques, data breaches, and product updates. Key highlights…
WindRelay Android Malware Turns Phones into NFC Relays for Payment Fraud
Cybersecurity researchers at Group-IB have uncovered a new Android malware family called WindRelay that turns victims' smartphones into NFC relays for contactless…
UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data
A recent wave of cyber attacks targeting financial services, private equity, and professional services has been attributed to the data extortion group…
Scattered LAPSUS$ Hunters: Shared Phishing-Kit Infrastructure
Scattered LAPSUS$ Hunters (SLH) is a threat actor associated with shared phishing-kit infrastructure. Some vishing attempts have been linked to SLH tradecraft,…
Fake Microsoft Entra Passkey Enrollment Used in Voice Phishing Attacks Targeting M365 Users
A sophisticated threat actor tracked as O-UNC-066 by Okta is targeting organizations across multiple sectors with a voice-based phishing (vishing) scheme that…