Generative AI is lowering the barrier for creating convincing fake login pages and lookalike domains designed to bypass traditional filters, capture MFA codes, and intercept authentication session tokens.
These attacks are no longer limited to stealing a simple password. Fake pages can copy the steps of additional security codes, known as multi-factor authentication, or even hijack a user's active session. This allows attackers to gain access to corporate accounts, even if there are increased security measures in place.
How the new traps work
Artificial intelligence allows attackers to quickly and massively create convincing copies of well-known websites, using the right logos, the same colors, and similar web addresses with small changes that are difficult to distinguish. According to a 2026 report by Verizon, this type of phishing attempt accounted for 44% of initial access cases examined.
In addition to passwords, some more advanced methods act as intermediaries between the user and the actual service. When the user logs in, the attackers intercept the digital connection keys, bypassing the additional security checks entirely without having to guess the password.
Why traditional measures are not enough
Email filters and blacklists often fail to catch new websites because they are created for a very short period of time. In addition, attackers send links via text messages, collaboration applications, or search engine ads, bypassing email protection.
READ ALSO
Australian authorities cut off connection to 180.000 infected computers
To better protect companies, experts recommend using security keys that cannot be fooled by fake pages, installing protection in browsers that detect suspicious addresses, constantly monitoring account traffic, and limiting access rights to only those who are absolutely necessary.
G
Hacks.gr on Google
Set it as a preferred source for cybersecurity updates.
Preferred source
end of article
Top comments (0)