Attackers use AI (Generated websites) to create believable government phishing websites, tricking Brazilian users into giving personal data and paying via Pix.
The use of AI makes the phishing more sophisticated, but there are technical signs (in code) that research teams can identify—and defenders have mitigations.