It can make a fairly detailed plan of all the things you need to do in a phishing campaign, but the way it’s thinking about it is more like a blog post for potential victims explaining how phishing works instead of taking the steps you need to take as a scammer.

The first two concerns I have above are technical in nature. In other words, something happened to the system that it wasn’t designed for. A company got hacked. An attacker emulated a real user and got access to their DA without authorization.

But the one that’s even more scary is when that doesn’t happen, and things work exactly as they’re supposed

... See more