gcdRadar
closedclosed 6 Mar 2025Breaches & attacks3 Confirmed exploitationAI

Hack Club Founder Targeted in AI-Driven Voice Phishing Attack

Google Assistant, Google Workspace

Cybercriminals used voice cloning and spoofed caller ID to impersonate support staff in an AI-assisted phishing attack targeting a tech organization founder. The attack was aborted when inconsistencies raised the victim's suspicions.

first report
20 Feb 2025
last update
20 Feb 2025

Timeline · 1

  1. 20 Feb 2025Cybercriminals Reportedly Exploited Google’s G.Co Subdomain and Spoofed Caller ID in AI-Driven Phishing Attack on Hack Club Founder

Sources · 1

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
AI-enabled attack
categories
AI phishing / social engineeringDeepfake fraud
severity
3 · Confirmed exploitation
targets
Google, Individuals
owasp llm top 10
no entry for these categories
dates
happened 20 Feb 2025 · first reported 20 Feb 2025
origin
AI Incident Database
Derived from the AI Incident Database (CC BY-SA 4.0).
record
confidence 0.90 · created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# Hack Club Founder Targeted in AI-Driven Voice Phishing Attack

https://gcdradar.vercel.app/incidents/hack-club-founder-targeted-in-ai-driven-voice-phishing-attac · AIR-2025-0172 · closed 2025-03-06

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation)
- Fix status: No fix needed
- First reported: 2025-02-20
- AI role: AI-enabled attack
- Products: Google Assistant, Google Workspace

## Summary

Cybercriminals used voice cloning and spoofed caller ID to impersonate support staff in an AI-assisted phishing attack targeting a tech organization founder. The attack was aborted when inconsistencies raised the victim's suspicions.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2025-02-20: Cybercriminals Reportedly Exploited Google’s G.Co Subdomain and Spoofed Caller ID in AI-Driven Phishing Attack on Hack Club Founder (https://incidentdatabase.ai/cite/942)

## Sources

- 2025-02-20 AI Incident Database: Cybercriminals Reportedly Exploited Google’s G.Co Subdomain and Spoofed Caller ID in AI-Driven Phishing Attack on Hack Club Founder https://incidentdatabase.ai/cite/942

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed
    AI
  2. closed
    Facebook Journalist Martin Wolf Impersonated in AI Investment Scams

    Breaches & attacks · Exploited · since 9 Mar 2025

    AI
  3. closed
    AI
  4. closed
    AI
  5. closed
    Syndicate Uses AI Police Impersonation to Defraud 163 Victims in Thailand

    Breaches & attacks · Real loss · since 4 Feb 2025

    AI
  6. closed
    AI