Hackers Exploit Vercel GenAI to Mass-Produce Convincing Phishing Sites

Cofense researchers report a surge in phishing campaigns leveraging Vercel's GenAI site generator (v0.dev) and cloud hosting to produce convincing fake pages that mimic major brands; attackers pair these pages with Telegram bots to receive stolen credentials and payment data in real time, with observed campaigns targeting Nike, Adidas, Microsoft and Spotify. The use of generative AI removes typical linguistic cues used for detection and enables rapid, low-cost redeployment of phishing sites, so users are advised to verify URLs and report suspicious Vercel-hosted pages.