Threat Actors Leverage Vercel’s AI Tools to Mass‑Produce Realistic Phishing Sites

A surge in phishing campaigns is abusing Vercel's GenAI (v0.dev) to rapidly generate pixel‑perfect fake login pages for brands like Microsoft, Spotify, and major retailers; attackers automate credential harvesting and use Telegram bots to receive stolen data, sometimes chaining to pages requesting payment card details. Cofense-tracked activity shows growth since 2022 into 2025, and recommended defenses include URL verification, monitoring for vercel.app subdomains in inbound links, reporting malicious Vercel sites, and updated security awareness training.