AI Turns Phishing into Subscription Service

A new class of criminal platforms bundles account takeover, mailbox analysis, target selection, and fraud playbooks behind a subscription: buyers pay an initiation fee and recurring charges to run automated, AI‑tailored phishing campaigns at scale. These services lower the skill barrier, let novices carry out sophisticated fraud, and use AI to both select high‑value victims and craft believable impersonations. — This matters because it reframes cybercrime as a commodified service that spreads risk widely, forces new regulatory and platform‑governance responses, and raises questions about liabilities for model hosts, payment processors, and hosting providers.