AI-Generated Phishing Sites Mimic Okta, Microsoft 365 in New Threat Campaign

We may earn from vendors via affiliate links or sponsorships. This might affect product placement on our site, but not the content of our reviews. See our Terms of Use for details.

Cybercriminals are using v0, an AI tool developed by Vercel, to rapidly generate convincing phishing websites, sometimes in as little as 30 seconds, according to an investigation by Okta, an identity and access management company.

Okta Threat Intelligence has uncovered that the AI-driven tool, designed to help developers create websites through natural language prompts, has now been co-opted by threat actors. These bad actors are abusing the technology to build fake login portals for well-known services, including Microsoft 365, cryptocurrency platforms, and Okta.

“The observed activity confirms that today’s threat actors are actively experimenting with and weaponizing leading GenAI tools to streamline and enhance their phishing capabilities,” wrote Okta researchers.

In a video, the Okta team demonstrated ...