Threat Actors Exploit Vercel's GenAI for Phishing Campaigns

• •Vercel's v0[.]dev tool is being exploited for creating realistic phishing sites.
• •Minimally skilled attackers can generate phishing pages using simple text prompts.
• •Cofense has reported a significant increase in phishing campaigns utilizing Vercel.

Threat actors are increasingly using Vercel's generative AI tool, v0[.]dev, to create realistic phishing websites that mimic well-known brands. Cofense has observed a rise in campaigns utilizing this tool, which allows even minimally skilled attackers to generate convincing phishing pages with simple text prompts. Vercel's platform not only simplifies the creation of these sites but also provides hosting, making it easier for attackers to deploy and redeploy phishing pages quickly. The phishing campaigns include fake Microsoft landing pages, Spotify emails, and job postings for major brands like Adidas and Nike. The ease of use and integration with other tools like Telegram and AWS enhances the threat posed by these campaigns. Security teams are advised to look for unusual sender domains and other signs of phishing in emails to mitigate risks. As generative AI capabilities improve, the potential for abuse by threat actors is expected to grow.