THE article discusses the Balonx Sistema, a Phishing-as-a-Service platform operating in Mexico, identified by Group-IB. This platform has targeted over 20 Mexican banks, exploiting more than 1,100 victims to potentially siphon off $99,384 USD. Key features of the operation include real-time phishing bypassing multi-factor authentication, an Android RAT (remote access tool), and AI-driven voice fraud, which replaces human callers with synthetic voices.
The service offers tiered subscriptions through a Telegram bot, revealing its structured and commercial nature. Despite the serious allegations, no arrests have been made. Users are advised to be cautious of suspicious apps and verification requests from banks.