A new cybercriminal group is selling “a sophisticated AI-powered phishing-as-a-service platform” that targets 36 Spanish banks, according to researchers at Group-IB.
The threat actor, dubbed “GXC Team,” controls at least 250 phishing domains and uses a strain of Android malware that can intercept one-time passwords (OTPs).
“Initially emerging in January 2023 on Telegram and Exploit[.]in, GXC Team specialized in developing and selling phishing kits, Android malware, and AI-powered scam tools,” Group-IB says.
“Their services included the sale of stolen banking credentials and custom coding for hire, operating under a malware-as-a-service model where customers could purchase phishing resources tailored to mimic bank domains. Notably, their Android malware was designed to intercept OTP (One-Time Password) codes, particularly affecting users of over 36 Spanish banks, governmental bodies, and 30 institutions worldwide.”
Notably, the phishing kit uses an AI-powered feature to generate voice calls that impersonate the banks.
“The developers also integrated an up-to-date AI feature that enables other threat actors to generate voice calls to its victims based on their prompts, straight from the phishing kit,” the researchers write. “In essence, the victims will receive calls purportedly from their bank, instructing them to provide their two-factor authentication (2FA) codes, instruct them to install apps disguised as malware, or perform any other actions desired by the other threat actors.
Employing this simple yet effective mechanism enhances the scam scenario even more convincing to their victims, and demonstrates how rapidly and easily AI tools are adopted and implemented by criminals in their schemes, transforming traditional fraud scenarios into new, more sophisticated tactics.”
New-school security awareness training can help your employees stay ahead of evolving social engineering tactics. KnowBe4 empowers your workforce to make smarter security decisions every day. Over 65,000 organizations worldwide trust the KnowBe4 platform to strengthen their security culture and reduce human risk.
Group-IB has the story.
Here's how it works:
