16/06/2026
What makes the scam particularly convincing is that there is no fake website to spot and no misspelled domain name, making it difficult for a user to distinguish the phishing attempt from a legitimate request.
“This phishing scam is getting more sophisticated by the day, with AI-generated lures and automated templates,” one user wrote in response to the FBI’s warning.
A fast-spreading cyberattack kit called 'Kali365' allows low-skill scammers to hijack a user’s account without ever stealing their password.
