SpamGPT: New AI Email Attack Tool Fueling Massive Phishing Operations

SpamGPT is described as an AI-driven email attack toolkit that has emerged on underground forums, pitched as an “AI-powered spam-as-a-service” platform for large-scale phishing campaigns. According to Varonis, its user-friendly interface and AI-assisted content generation significantly lower the barrier for mass phishing operations, with a dashboard that mimics legitimate email marketing services and includes modules for campaign setup, SMTP/IMAP configuration, deliverability tests, and real-time analytics.

The toolkit centres on an integrated AI assistant called KaliGPT that creates phishing text, subject lines, and campaign strategies on demand, and it promises guaranteed inbox delivery for providers such as Gmail, Outlook, Yahoo and Microsoft 365 by abusing cloud services like AWS or SendGrid. Features include SMTP cracking, spoofing, inbox monitoring, and an inbox-check module that tests whether messages land in the primary inbox or spam.

The price is reportedly around $5,000, and screenshots show operators configuring 20 SMTP servers and four IMAP accounts ready to deploy, highlighting how AI-enabled tools can scale phishing operations.