Hackers Use ATHR to Run AI-Powered Vishing, Credential Theft, and Phone

Cybersecuritynews •Tushar Subhra Dutta • April 17, 2026

A new cybercrime platform called ATHR is making it much easier for attackers to run large-scale phone-based phishing operations, also known as vishing. Instead of relying on malicious links or infected email attachments, this platform sends simple-looking emails with just a phone number. When the target calls that number, they are walked into a carefully […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ATHR Platform Enables Scalable AI-Driven Vishing Attacks The ATHR cybercrime platform has emerged as a significant tool for executing automated voice phishing (vishing) attacks, utilizing AI agents and human operators to harvest credentials. Advertised on underground forums for $4,000 plus a 10% commission on profits, ATHR automates the entire telephone-oriented attack delivery (TOAD) process. Attackers send benign-looking emails containing only a phone number, prompting victims to call. Once connected, the AI agents guide victims through a scripted process designed to extract sensitive information, such as verification codes. The platform supports credential theft from multiple services, including Google, Microsoft, and Coinbase. ATHR's integration of various attack components allows even less technical criminals to conduct sophisticated phishing operations. Researchers have noted that ATHR's capabilities significantly reduce the manual effort required for such attacks. The platform's dashboard provides real-time monitoring and control over operations, enhancing its effectiveness. 6 sources 67

Extracted Entities

Hackers Use ATHR to Run AI-Powered Vishing, Credential Theft, and Phone

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Platforms (1)