Hackers abuse generative AI tool to create phishing sites in as little as 30 seconds

In as little as 30 seconds, hackers are using a popular generative AI development tool to build phishing sites mimicking login pages, according to researchers at identity management company Okta.Why it matters: At least one of the cloned phishing pages was a replica of Okta's own login portal.If successful, such a lure could have allowed attackers to harvest users' Okta credentials and gain access to sensitive corporate systems.Driving the news: In a report first shared with Axios, Okta revealed that threat actors have been abusing Vercel's v0 to generate a fake Okta sign-in page.Brett Winterford, vice president of Okta Threat Intelligence, told Axios that this is the first time the company has seen cybercriminals use a generative AI tool to create the phishing infrastructure itself, not just the contents of a phishing email or other lure.How it works: v0 allows users to create websites using only natural-language prompts.In a video shared with Axios, Okta researchers demonstrated how easily they could create a convincing phishing page simply by prompting v0 to "build a copy of the website login.okta.com."While investigating the incident, Okta also uncovered phishing sites hosted on Vercel's platform targeting users of cryptocurrency services and Microsoft 365.Threat level: Winterford said Okta doesn't have any evidence yet that hackers successfully harvested credentials through these sites.But in the weeks that Okta spent investigating the one instance of a phishing site targeting one of its customers, researchers observed threat actors had used v0 to spin up new sites targeting other tech platforms.Vercel has since removed access to the identified phishing sites and is collaborating with Okta to develop mechanisms for third-party reporting of abuse on the v0 platform."Like any powerful tool, v0 can be misused," Ty Sbano, CISO at Vercel, told Axios in a statement. "This is an industry-wide challenge, and at Vercel, we're investing in systems and partnerships to catch abuse quickly and keep v0 focused on what it does best: helping people build powerful web apps."The big picture: Security researchers have long warned that generative AI could accelerate low-sophistication cyberattacks like phishing."We've got to stop adding to our defensive measures by increment and just tweaking around the edges," Winterford said. "The attackers are going to innovate faster than we can as defenders."The intrigue: Okta also found cloned versions of the v0 tool circulating on GitHub, meaning hackers could continue generating phishing sites even if Vercel cracks down on abuse.The bottom line: Okta says the only way to defend against these phishing attacks is to turn to passwordless technologies, noting that the old ways of spotting a phishing website don't apply anymore.Go deeper: AI is perfecting scam emails, making phishing hard to catch

Comments

World news

Chaos in Spain as locals and tourists left stranded for 14 hours in area loved by Brits

Express

‘We’ll have to arrest him’: Trump threatens jail for Mamdani in NYC and calls Biden a ‘son of a b****’ in wild ‘Alligator Alcatraz’ visit

about 4 hours ago

Everything travellers to Europe need to know about heatwave safety and your holiday rights

Independent

Comments

Similar News

'Robert' returns: FBI investigating suspected Iranian hackers claiming to have Trump team info

Iranian hackers threaten to release treasure trove of White House emails

El Chapo’s Mexican drug cartel ‘hired hacker to infiltrate public CCTV cameras to track down and kill FBI informants’

Iran-linked hackers threaten to release emails stolen from Trump associates

These US airlines were targeted by cyber hackers this month

Dutch government says pro-Russian hackers target municipalities linked to this week's NATO summit

Hackers say they wiped out $90 million from Iran cryptocurrency exchange

Hackers ‘break into’ Iranian TV after country’s Supreme Leader threatens ‘all out war’ with US

Chinese hackers and user lapses turn smartphones into a 'mobile security crisis'

China issues warrants for alleged Taiwanese hackers and bans a business for pro-independence links

What to expect from defence review, from nuclear-armed jets to cyber hackers

World news

Chaos in Spain as locals and tourists left stranded for 14 hours in area loved by Brits

French cops pictured in buggies paid for by UK but still can't stop migrant boats

Horror as investigators find nearly 400 bodies hidden in business park

Donald Trump threatens to deport US citizens if they meet one condition

Chaos in Greece as olive oil crisis threatens huge shortage

Putin reeling as Ukraine launches 'deepest' attack of war 620 miles inside Russian border

Mamdani hits back at Trump’s deportation threat: ‘We will not accept this intimidation’

Kanye West stripped of Australian visa over Heil Hitler song

Bryan Kohberger plea deal updates: Idaho murder suspect set to appear in court for hearing on murder charges

Trump jokes about immigrants being attacked by alligators during ‘Florida Alcatraz’ tour

Trump bill latest: House Republicans threaten to tank ‘Big, Beautiful Bill’ after marathon vote passes welfare cuts

Two killed in Spain wildfires as severe heatwave engulfs Europe

Europe heatwave latest: Two killed in Spanish wildfire as extreme temperatures sweep the continent

Nearly 400 human corpses found piled high at 'secret crematorium' near Mexico-US border

Elon Musk posts grovelling Trump tweet after president’s deportation threat

Mogadishu crash: Huge explosion rocks major airport

Palestine Action ban to be voted on - when, why and how it will happen

Diddy verdict live: Jury deadlocked on final, most serious count as deliberations continue for third day

Watch as millions of ‘lovebugs’ swarm hikers on South Korean mountain

Many Germans believe Frederick the Great brought potatoes to the country. It’s not true

Flights cancelled and thousands without power after Australia hit by ‘bomb cyclone’

What makes someone 'cool'? New study reveals the key to being 'fresh'

Snake on a plane! Flight delayed by two hours after 'dangerous looking' reptile found in plane's cargo hold

Seven breakout stars to watch at Euro 2025 – including a ‘Little Messi’

Costa Rica's top court seeks to strip President Chaves' immunity over corruption case

Oil-drilling ship capsizes in Gulf of Suez, killing at least 4 crewmen, Egypt says

Russia ramps up offensives on 2 fronts in Ukraine as both sides seek an advantage

Venezuelan lawmakers declare UN human rights chief persona non grata

Hurricane Flossie gains Category 3 strength in the Pacific while remaining off Mexico's southwest coast

Managers are using AI to assess raises, promotions, even layoffs: New study

Inside secluded farm where 'ghost kids', 6 and 9, lived 'completely unknown'

Son of El Chapo who ran cartel faction cuts plea deal in drug trafficking case

Heathrow Shutdown Caused by Problem Left Unfixed for Years, Report Says

Inside 'human slaughter house' prisons with 'execution parties' and horror torture

Ibiza declares war on sunbeds as locals slam 'colonisation'

Scotland will only be safe when we have independence

We can't afford to risk another 'one we got away with' when Trump comes calling

‘We’ll have to arrest him’: Trump threatens jail for Mamdani in NYC and calls Biden a ‘son of a b****’ in wild ‘Alligator Alcatraz’ visit

Everything travellers to Europe need to know about heatwave safety and your holiday rights

What is a heat dome? Weather system explained as UK and Europe hit by sweltering temperatures

Rare weather phenomenon grips Portugal beach during heatwave

Trump says Israel has agreed conditions for 60-day Gaza ceasefire

Boy, 9, and girl, 7, found in nappies and ‘unable to speak’ hidden away on remote farm

Turkey detains 120 opposition officials including former mayor

Snake on a plane delays a flight in Australia

Leader of Tibetan Buddhism says he won't be the last Dalai Lama

A complete guide to Women's Euros 2025

Dalai Lama Tightens Grip on Reins of Succession in the Face of Chinese Pressure

Dalai Lama Succession: How the Next Tibetan Spiritual Leader Will Be Chosen

Full list of European countries under heatwave alerts as mercury soars to 46C

Paramount agrees to pay Trump $16 million to settle ‘60 Minutes’ lawsuit CBS News called ‘meritless’

Trump claims Israel has agreed to 60-day ceasefire in Gaza

Europe heatwave latest: Eiffel Tower summit closed as continent faces record-breaking temperatures

Australia bomb cyclone live: Flood emergency warnings issued as strong winds leave thousands without power

I gave up on transferring my pension to one pot as it was too complicated

Jordan Nobbs: Nine things you didn’t know about the Lionesses

K-pop is coming for your kids – embrace it

Steve Coogan: ‘Keir Starmer makes me admire Thatcher – at least she had a point of view’

I used to hate watching Novak Djokovic at Wimbledon – but now I’m a convert

The no-fly French holiday with sunshine, cobbled cities and an Art Deco pool