: The bot immediately calls the victim, impersonating a trusted institution (like a bank) using a professional script to report "unauthorized activity".

: Analysts from Recorded Future confirmed that the tool is simple to configure and requires minimal technical expertise to deploy against victims. How the Bot Operates

: The attacker attempts to log in to the victim's account (e.g., bank or cryptocurrency wallet), which triggers a legitimate OTP SMS or call to the victim's phone.