CyberHappenings logo
☰
Home Browse Watchlists Experimental About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

Increase in Vercel-based phishing campaigns leveraging generative AI tools

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

Low-skilled threat actors are increasingly abusing Vercel’s v0.dev generative AI platform to create sophisticated, brand-impersonating phishing pages, enabling high-fidelity social engineering attacks with minimal technical effort. Attackers exploit Vercel’s free-tier testing, low-cost pro tiers, integrated hosting, and cloud-based infrastructure to rapidly deploy and redeploy malicious sites that closely mimic legitimate brand landing pages, including Microsoft, Spotify, Adidas, Ferrari, Louis Vuitton, and Nike. The platform’s integration with third-party services such as Telegram, AWS, Stripe, and xAI further enhances operational flexibility and credential harvesting capabilities.

Timeline

  1. 07.05.2026 11:30 1 articles · 1h ago

    Vercel’s v0.dev used to scale phishing operations through generative AI

    Cofense reports a surge in phishing campaigns where threat actors use Vercel’s v0.dev platform to generate high-fidelity, brand-impersonating landing pages via natural language prompts. The platform’s free-tier access, low-cost pro tiers, integrated hosting, and third-party integrations (e.g., Telegram, AWS, Stripe, xAI) enable rapid deployment and redeployment of malicious infrastructure, significantly lowering the barrier to entry for phishing operations targeting major brands such as Microsoft, Spotify, Adidas, Ferrari, Louis Vuitton, and Nike.

    Show sources
    Open in new tab

Information Snippets

  • Vercel’s v0.dev platform allows threat actors to generate fully functional phishing pages using natural language prompts, reducing the need for advanced technical skills or dark web phishing kits.

    First reported: 07.05.2026 11:30
    1 source, 1 article
    Show sources

  • Threat actors can test v0.dev’s AI models for free before purchasing tokens starting at $20 per month, enabling low-cost, scalable phishing operations.

    First reported: 07.05.2026 11:30
    1 source, 1 article
    Show sources

  • Vercel provides cloud-based hosting for generated pages, enabling rapid deployment and redeployment of phishing sites after takedowns, with minimal infrastructure overhead.

    First reported: 07.05.2026 11:30
    1 source, 1 article
    Show sources

  • Observed phishing campaigns impersonate major brands including Microsoft, Spotify, Adidas, Ferrari, Louis Vuitton, and Nike, leveraging Vercel’s AI to create highly convincing landing pages.

    First reported: 07.05.2026 11:30
    1 source, 1 article
    Show sources

  • Cofense reports a significant and sustained increase in abuse of Vercel’s generative AI tools for phishing campaigns, alongside similar abuse of other platforms like DeepSite and BlackBox.

    First reported: 07.05.2026 11:30
    1 source, 1 article
    Show sources