Venom Phishing Platform Uses AI-Generated Sites and QR Codes to Target Senior Executives

Venom is a phishing-as-a-service platform that allows hackers to rapidly deploy campaigns. It recently added AI-generated fake websites and malicious QR codes aimed at senior executives at companies worldwide. Attackers use adversary-in-the-middle, or AiTM, techniques to intercept Microsoft account credentials and login sessions, potentially bypassing multifactor authentication and threatening the security of corporate email and sensitive data.

The latest activity shows that Venom has expanded its reach to more than 20 industries. It also conceals malicious links in QR codes to reduce detection by email security systems. The hackers are primarily seeking to steal Microsoft accounts. As of the report’s publication, researchers had not disclosed the exact dates of the attacks, the number of affected companies or the value of any losses.