Phishing is no longer a lone technical attacker with a spoofed email. It is a structured, subscription-based criminal economy powered by no code AI tools and Crypto. For as little as $400 per month, attackers can access unlimited enterprise-grade phishing kits-as-a-service (PhaaS), complete with hosting, anti-detection tooling, OTP interception, victim dashboards, and customer support. Telegram now functions as the operating system for scam networks - enabling recruitment, payments, laundering and real-time victim coordination.

In this session, we will demo the latest phishing kits and explore how AI is accelerating perfect replicas of login pages, payment details and impersonation at scale. Examine how these operations mirror legitimate SaaS companies. We will analyse what this means for defenders. Traditional detection models are lagging behind adversaries who operate with automation, modular tooling and rapid infrastructure rotation. Attack surfaces are widening as impersonation risks are now far larger than just the assets of 1 organisation.