ATHR Platform Automates Callback Phishing With AI Voice Agents
Summary
Abnormal AI researchers report that ATHR combines spoofed security-alert emails, phone routing and AI voice agents to harvest credentials and six-digit codes. The platform is reportedly sold for $4,000 plus 10% of profits.
Key points
- Abnormal AI researchers describe ATHR as a for-sale platform that automates callback-phishing campaigns.
- Its spoofed security-alert emails contain a phone number but no links or attachments; callers are routed to a human operator or AI agent.
- Researchers say AI agents use scripted conversations to solicit credentials and six-digit verification codes.
- The platform reportedly includes credential-harvesting panels for services including Google, Microsoft, Coinbase and Binance.
- Operators can monitor calls and adjust lures; ATHR is reportedly sold for $4,000 plus 10% of phishing profits.
Article Details
- Event Type
- A for-sale platform, ATHR, automates callback phishing using spoofed security-alert emails and human operators or AI voice agents.
- Impact
- ATHR enables operators to collect account credentials and six-digit verification codes through phone calls, using pre-built credential-harvesting panels and call monitoring. The article says the platform is sold for $4,000 plus 10% of profits and may make these attacks cheaper, faster, and harder to distinguish from legitimate communications.