SpamGPT Toolkit Enables Large-Scale Phishing Campaigns US, EU

In 2025, phishing and scam tactics have evolved with the emergence of sophisticated tools like SpamGPT, a $5,000 cybercrime toolkit that automates large-scale phishing campaigns by integrating AI to craft persuasive content and bypass spam filters, significantly lowering the technical barriers for cybercriminals. Meanwhile, the Phantom Hacker Scam is rapidly targeting older adults through a three-phase con involving tech support, financial institution, and government impersonators, resulting in billions in losses and prompting warnings from the FBI and state officials to avoid downloading software or transferring money upon unsolicited requests. Additionally, a new phishing kit called Salty2FA has been detected in the US and EU, capable of bypassing multiple two-factor authentication methods to facilitate account takeovers, particularly in finance, energy, and telecom sectors. Individual cases like those in Memphis reveal scammers use urgency and credible-looking emails to deceive victims into giving access to their devices or personal information, emphasizing the need for skepticism toward unsolicited contacts and verification through official channels. Experts advise businesses to enforce email authentication protocols and train employees on phishing indicators, while individuals are urged to report suspicious activity and avoid engaging with unknown contacts demanding software installation or financial transfers. These combined threats highlight the increasing sophistication and scale of phishing operations, underscoring the importance of vigilance and layered security measures.