Cybercriminals have gained access to a new tool that enhances voice-phishing schemes, known as ATHR. For a payment of $4,000 along with a 10% share of profits, users can send deceptive emails that appear to originate from reputable companies such as Google, Microsoft, and Coinbase.
The emails prompt victims to call a phone number, which connects them to either an AI voice agent or a human scammer. The platform’s sophisticated design enables it to evade standard security measures, as it utilizes customizable templates that often pass both manual and automated scrutiny. Rather than including links or attachments, these emails focus on creating a sense of urgency through fake security alerts.
Once victims call the provided number, they are guided through a scripted scenario meant to extract sensitive information, such as verification codes, under the guise of account security. ATHR's capabilities include monitoring calls and directing victims to tailored phishing panels for various services like Binance and Yahoo. This shift to automated AI agents marks a significant evolution in phishing tactics, allowing for more efficient operations than previous methods.