AI: Threat, tool, or both?
2026-06-05T20:51:52Z•38da72bd04f742ef8d773330f09a4eb8dd9d697dba7c866f5688c21b1e31d848
AI-abuseAndroidInstagramKali365MFA-bypassSignalWindowsaccount-takeovercredential-theftdata-breachfake-downloadsfraudinfostealersmacOSmalwarephishingscamssocial-engineeringthreat-intel
What happened
A batch of Malwarebytes Labs posts (late May–early June 2026) highlights an uptick in social‑engineering and credential‑theft campaigns across platforms: AI/chatbot abuse enabled Instagram account takeovers, phishing kits (Kali365) are bypassing MFA to steal Microsoft accounts, and infostealers are increasingly used as phishing payloads. Attackers are distributing cross‑platform malware via fake downloads (ChatGPT, BlueWallet), abusing recovery flows (Signal backups) and spoofed notices (copyright, invoices) to harvest credentials and payment info. Several large data‑exposure incidents (23and
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- malwarebytes_labs
- Record identifier
- 38da72bd04f742ef8d773330f09a4eb8dd9d697dba7c866f5688c21b1e31d848
- Enrichment time
- 2026-06-05T20:51:52Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.