[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fvWOAMg2noLZsaoRmCqf_O065oM-Zmv_yrjiq4f_EoQE":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":17,"status":18,"created_at":19,"published_at":20,"article":21,"tags":25,"podcasts":38,"controls":39},"cbdab930-c87f-4607-a05e-7803f6b6e7a8","ai-powered-vishing-platform-automates-voice-based-credential-theft","8a0363ef-e70e-48ba-ac45-123409d6c321","AI-Powered Vishing Platform Automates Voice-Based Credential Theft","The ATHR platform represents a significant escalation in social engineering attacks by combining AI voice agents with human operators to conduct sophisticated telephone-oriented credential theft campaigns. This automation dramatically reduces the skill and resource requirements for attackers to execute convincing voice phishing attacks against major services like Google, Microsoft, and Coinbase. The platform's accessibility through underground forums for $4,000 means organizations must prepare for a surge in AI-enhanced social engineering attempts targeting their users and employees.","**Immediate actions:**\n- Implement mandatory security awareness training focused on voice-based social engineering and AI-generated voice attacks\n- Deploy multi-factor authentication that cannot be compromised through voice calls or SMS\n- Establish verification procedures requiring employees to independently verify caller identity through official channels\n\n**Long-term improvements:**\n- Develop and regularly test incident response procedures specifically for social engineering attacks\n- Create user education programs about AI voice cloning and deepfake audio technologies\n- Implement behavioral analytics to detect unusual authentication patterns or credential usage\n\n**Detection measures:**\n- Monitor for unusual login attempts following unsolicited phone calls to employees\n- Deploy email security solutions that can detect TOAD campaign initial lure messages\n- Establish user reporting mechanisms for suspicious phone calls requesting credentials or sensitive information",[12,13,14,15,16],"CIS Control 14","NIST SP 800-63B","NIST AC-2","ISO 27001 A.13.2.1","MITRE ATT&CK T1566.004",{},"published","2026-04-16T17:07:58.964546+00:00","2026-04-16T17:07:58.825+00:00",{"id":7,"url":22,"slug":23,"title":24},"https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fnew-athr-vishing-platform-uses-ai-voice-agents-for-automated-attacks\u002F","new-athr-vishing-platform-uses-ai-voice-agents-for-automated-attacks-fe558f","New ATHR vishing platform uses AI voice agents for automated attacks",[26,32],{"id":27,"name":28,"slug":29,"description":30,"color":31},"1ec88fde-2d0f-4ed8-932a-33f5ccc0fdc7","Access Control","access-control","Excessive privileges, missing MFA, weak auth","#f97316",{"id":33,"name":34,"slug":35,"description":36,"color":37},"7261eb8f-acd4-4d93-a489-7fdd652ec0ea","Security Awareness","security-awareness","Phishing, social engineering, human error","#22c55e",[],[40,44,48],{"slug":41,"name":42,"problem":43},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",{"slug":45,"name":46,"problem":47},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",{"slug":49,"name":50,"problem":51},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them."]