Cybersecurity

A new AI-driven email attack toolkit, known as SpamGPT, has emerged on underground forums, providing cybercriminals with an integrated platform for executing phishing campaigns. This toolkit is advertised as an “AI-powered spam-as-a-service” solution and offers automation for email server compromise, spam filter evasion, and campaign analytics.

AI-Enhanced Campaign Creation and Optimization

SpamGPT features a dashboard similar to legitimate email marketing services, including modules for campaign setup, SMTP/IMAP configuration, deliverability tests, and analytics. A central feature is the AI assistant, “KaliGPT,” which generates phishing email content and strategies, simplifying the process for users. The platform provides live metrics such as delivery rates and click-through statistics, allowing for real-time campaign adjustments.

SpamGPT claims to ensure inbox delivery for major providers like Gmail, Outlook, Yahoo, and Microsoft 365, utilizing cloud services such as AWS or SendGrid to evade spam filters.

SMTP Cracking, Spoofing, and Inbox Monitoring

SpamGPT includes a training program on SMTP server exploitation, enabling users to find or create high-quality SMTP servers for bulk email sending. The toolkit facilitates email spoofing through custom header controls, allowing attackers to bypass SPF, DKIM, and DMARC checks.

The platform also provides a bulk SMTP and IMAP checker for verifying credentials and an IMAP monitoring module for logging into target mailboxes to capture bounces and auto-replies. An “inbox check” module tests email placements to refine campaigns before full-scale execution.

The interface supports multithreading across numerous SMTP servers and IMAP accounts, optimizing volume and reducing throttling. Logs detail emails sent, delivered, and opened, mimicking legitimate marketing platforms.

SpamGPT is available at a starting price of approximately $5,000, making it accessible to individual operators rather than requiring development teams.

Organizations are advised to enhance defenses with strict email authentication policies, advanced filter configurations, and threat intelligence to counteract campaigns generated by tools like SpamGPT.