Per Bleeping Computer, a new cybercrime platform named ATHR is automating voice phishing (vishing) attacks, utilizing both human operators and AI agents for sophisticated social engineering.
ATHR, advertised for $4,000 plus a 10% commission, streamlines the entire telephone-oriented attack delivery (TOAD) process, according to Abnormal researchers. It begins with deceptive emails, often mimicking security alerts, designed to bypass authentication checks. These emails direct victims to call a provided number, which then connects them to either AI voice agents or human operators.
The AI agents, guided by detailed prompts, simulate account recovery processes for services like Google, Microsoft, and Coinbase, aiming to extract six-digit verification codes. ATHR supports eight online services and provides a dashboard for operators to manage email distribution, handle calls, and monitor outcomes in real time.
Source: Bleeping Computer
