Athena StealthRoute: A Phishing Marketplace With Cloaking and AI Tools
Abnormal, Wednesday, October 21st, 2026
Abnormal details Athena StealthRoute, a phishing-as-a-service marketplace with link cloaking and new AI content tools.
Abnormal describes Athena StealthRoute, a previously unreported modular phishing-as-a-service platform that prepares, delivers and conceals phishing attacks.
It offers a marketplace of domains, landing pages and lure emails, plus link management and traffic filtering that diverts security scanners.
Over six months ending October 9, 2026, Abnormal observed about 89,700 attack messages tied to the platform across roughly 2,280 U.S. and EU organizations.
A capture of the operator console showed the platform has added AI-assisted content-generation workflows.