A new cybercrime platform called ATHR enables fully automated voice phishing attacks using AI voice agents and human operators to harvest user credentials.
ATHR represents a significant evolution in vishing attacks, combining artificial intelligence with social engineering to target victims at scale. The platform deploys AI voice agents capable of conducting credential-harvesting calls without direct human intervention, though operators can engage when needed.
The system automates the initial reconnaissance and social engineering phase of attacks, reducing the manual effort traditionally required for voice phishing campaigns. This shift toward automation increases the potential attack surface, as threat actors can target more victims simultaneously.
The emergence of ATHR highlights growing concerns about AI-powered cybercrime tools. As voice synthesis technology improves, distinguishing between legitimate and malicious calls becomes increasingly difficult. Organizations face pressure to update security protocols and employee training to address voice-based threats alongside traditional phishing vectors.
The platform's hybrid approach—combining AI efficiency with human expertise—demonstrates how criminals adapt to leverage emerging technologies for larger-scale operations.
A new macOS malware called CrashStealer disguises itself as Apple's crash-reporting tool to steal credentials, keychain data, and cryptocurrency wallets from infected systems.
Security firm Jscrambler disclosed that attackers published a malicious version of its npm package, which was downloaded nearly 1,500 times before detection. The compromised package contained infostealer malware targeting developer systems.
Security researchers are turning prompt injection attacks into a defensive weapon. The technique, called "context bombing," forces malicious AI agents to shut down before causing damage.
The Los Angeles Police Department has allowed its contract with surveillance company Flock to expire, citing serious civil liberties and privacy concerns. The move marks a significant departure for one of Flock's largest government customers.