gcdRadar
archive/Research/AIR-2026-1475
closedclosed 6 Nov 2026Research1 Research / proof of conceptAI

PhishGen Evaluation of LLM-Driven Phishing Website Generation

Researchers evaluated the capabilities of large language models in automatically generating functional and visually deceptive phishing websites. The study benchmarks LLM-generated pages against human deception standards.

first report
23 Oct 2026
last update
23 Oct 2026

Timeline · 1

  1. 23 Oct 2026PhishGen: Understanding LLM Capabilities in Automated Phishing Website Generation

Sources · 1

Research and catalogues

  1. 2026-10-23

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
AI-enabled attack
categories
AI phishing / social engineering
severity
1 · Research / proof of concept
targets
Individuals
owasp llm top 10
no entry for these categories
dates
happened 23 Oct 2026 · first reported 23 Oct 2026
origin
News & research feeds
record
confidence 0.90 · created 2026-10-23 05:05Z · updated 2026-11-07 02:05Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# PhishGen Evaluation of LLM-Driven Phishing Website Generation

https://gcdradar.vercel.app/incidents/phishgen-evaluation-of-llm-driven-phishing-website-generatio · AIR-2026-1475 · closed 2026-11-06

- Lane: Research
- Severity: 1 (Research / proof of concept)
- Fix status: Fix status unknown
- First reported: 2026-10-23
- AI role: AI-enabled attack

## Summary

Researchers evaluated the capabilities of large language models in automatically generating functional and visually deceptive phishing websites. The study benchmarks LLM-generated pages against human deception standards.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-10-23: PhishGen: Understanding LLM Capabilities in Automated Phishing Website Generation (https://arxiv.org/abs/2610.30226)

## Sources

- 2026-10-23 arXiv: PhishGen: Understanding LLM Capabilities in Automated Phishing Website Generation https://arxiv.org/abs/2610.30226

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. live
    AI
  2. closed
    AI
  3. closed
    Threat actors deploy open-weight AI models for mass attacks

    Breaches & attacks · Exploited · since 23 Oct 2026

    AI
  4. closed
    AI
  5. closed
    Claude Fake Web3 Accelerator Uses Malicious npm Packages to Distribute Malware

    Breaches & attacks · Exploited · since 19 Oct 2026

    AI
  6. closed
    AI