socradar.io 4/22/2026, 2:31:49 PM · via preferred

AI vishing bot PlugValley automates credential theft for users

CyberSIXT Evidence Panel Source marked as original reporting

PUBLISHED on 22 April 2026, How AI Changed Vishing: Case of PlugValley explains how AI-enabled vishing platforms have lowered the skill barrier by combining voice synthesis, caller ID spoofing, scripted call modes, voicemail detection, and real‑time credential capture into a single product. It focuses on PlugValley, a Vishing-as-a-Service platform whose OTP Bot acts as its core product, offering a dashboard that conveys extracted credentials to operators without requiring improvised talking or manual logging.

The article details a three‑step call setup: the operator selects a voice and target, then configures call settings including verification, spoofing, SIP streaming, and voicemail detection, before confirming the call. Live calls show the bot handling the voice work while the operator triggers specific data requests, with the Real-time Activity log recording events such as code capture within seconds and a full session lasting 56 seconds.

The piece emphasises that AI shifts the threat model from skilled social engineers to operators supervising autonomous bots at scale, making previously constrained attacks feasible for non-technical users.

View full article

Article by CyberSIXT