aiqbench analysis
This article details how attackers are weaponizing generative voice synthesis to create real-time, interactive social engineering attacks that bypass traditional multi-factor authentication defenses. The core technical mechanism involves synchronizing AI-driven phone calls with dynamic fake banking interfaces via persistent WebSocket connections to manipulate victims into revealing sensitive credentials under duress. This represents a significant evolution in phishing where the attacker controls both the audio and visual context simultaneously, rendering standard SMS-based verification insufficient against guided fraud scenarios.
Hackers Use AI Voice Calls and Fake Banking Pages to Bypass MFA and Steal Accounts

Hackers are pairing AI-generated phone calls with fake banking pages to take over customer accounts, even when multi-factor authentication is enabled. The campaign, tracked as Balonx Sistema, gives criminals a live view of a victim’s phishing session and lets them request information at the precise moment it is needed. The operation targets more than 20 […] The post Hackers Use AI Voice Calls and Fake Banking Pages to Bypass MFA and Steal Accounts appeared first on Cyber Security News.
Hackers are pairing AI-generated phone calls with fake banking pages to take over customer accounts, even when multi-factor authentication is enabled. The campaign, tracked as Balonx Sistema, gives criminals a live view of a victim’s phishing session and lets them request information at the precise moment it is needed. The operation targets more than 20 Mexican financial institutions and has collected credentials and financial data from over 1,100 people since at least October 2025. It is built…
Excerpt shown under the publisher's RSS terms · 77 words · full text and figures are on the publisher's site
Related coverage

Cybersecurity Awareness Month 2026 – Don’t Make It Easy for Them
Cybersecurity News · Oct 7, 2026

Hackers Use Passkey-Themed Phishing to Hijack Microsoft 365 Accounts and Steal Cloud Data
Cybersecurity News · Sep 10, 2026

Hackers Target 60 Indian Banking and UPI Apps With New GhostBat Android Malware
Cybersecurity News · Oct 16, 2026

Phantom Deal Hackers Impersonate Executives and Use Fake NDAs to Steal Corporate Wire Transfers
Cybersecurity News · Sep 3, 2026