New Phishing Kit Uses AI to Fully Automate Vishing Attacks
KnowBe4, Wednesday, September 2nd, 2026
A phishing-as-a-service kit called Balonx chains four commercial AI services to run voice phishing calls end to end.
KnowBe4 reports on Group-IB research into a new phishing kit that uses generative AI to fully automate voice phishing attacks.
The platform, called Balonx, includes a module named CallFlow that researchers describe as a fundamental evolution in the phishing-as-a-service market.
CallFlow strings together four commercial AI services to conduct the calls: OpenAI's GPT-4o-mini, ElevenLabs' AI voice generator, OpenAI Voice and OpenAI Whisper. The result is a vishing capability that requires no human operator, lowering the skill and staffing barrier for attackers.