New AI-powered phishing platform Athena StealthRoute discovered
Abnormal Security researchers have uncovered a new service platform called Athena StealthRoute that uses artificial intelligence to generate customized phishing content and bypass security scanners.
Examinations by Abnormal Security have identified a new 'phishing-as-a-service' platform named Athena StealthRoute, which cyber attackers use to facilitate phishing campaigns.
Discovered in August 2026, the platform was used in 89,700 attack messages targeting 2,280 organizations in the US and Europe between April and October 9. The platform's 'AI Studio' allows the creation of target-specific phishing content and forged materials through six different workflows.
In addition to content generation, the system uses features such as domain management and link cloaking tools to deceive security scanners and redirect them to harmless pages. Although it does not directly perform credential theft, it significantly accelerates the preparation and delivery phases of attacks.
Assessment: Experts warn that the cloaking and adaptive content capabilities provided by the platform render traditional link-based detection methods ineffective. Security teams are recommended to monitor shared backend infrastructure and link patterns instead of individual message analysis.
Sources
- scworld.com · Link