GenAI Used For Phishing Websites Impersonating Brazil’s Government

In this blog post, ThreatLabz explores a campaign that uses generative AI tools like DeepSite AI and BlackBox AI to create malicious replicas of Brazil's State Department of Traffic and Ministry of Education. Our technical analysis explains the telltale signs of AI generated source code, and how the campaign uses API validation to establish legitimacy. In addition, our analysis shows how the final stage of the campaign involves prompting victims to make payments using Pix, Brazil's instant payment system.