Resecurity Identifies AI Tool Being Used to Compromise Business Email
ID: 255320c1-561e-5fac-a1b8-9153e76c72b5
STIX ID: report--255320c1-561e-5fac-a1b8-9153e76c72b5
Feed Name: Security Boulevard
Threat Score
Resecurity identified GXC Team's 'Business Invoice Swapper', an AI-enabled tool that scans compromised email accounts, generates and injects fraudulent invoices (including swapped IBAN/BIC), and sends forged messages via SMTP while reporting to a Telegram channel for C2; the tool is marketed to criminals (subscription or one-time purchase) and has been used against over 300 targets across several European countries.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.