CyberWire Daily The phishing kit that thinks like a human. [Research Saturday]
14 snips
Feb 7, 2026 
Piotr Wojtyla, Head of Threat Intelligence at Abnormal AI, explains InboxPrime AI, an AI-powered phishing kit. He covers how it uses Gmail, templates, and AI to craft polished, believable emails. Discussion includes its low one-time price, scalability features, and the shift toward autonomous, industrialized phishing tools.
AI Snips
Chapters
Transcript
Episode notes
AI Plus Legit Infrastructure Multiplies Trust
- InboxPrime AI combines AI content and Gmail infrastructure to craft polished phishing emails at scale.
- The tool's UI and Gmail delivery make attacks pass basic authenticity checks and appear trustworthy.
Gmail Delivery Defeats Simple Email Checks
- Sending via Gmail lets phishing bypass SPF/DKIM/DMARC checks that defenders rely on.
- Emails from legitimate providers also increase recipient trust and inbox placement.
AI Creates Role-Specific, Convincing Lures
- The AI component generates tailored, role-specific, grammatically perfect emails from a few parameters.
- Templates plus AI let attackers produce targeted lures for payroll, HR, and other high-value workflows.