Matthew RosenquistFounder & CISO Advisor, Cybersecurity Insights · CISO, Cybersecurity Strategist, & Industry Advisor

AI Phishing with Synthetic Websites - Cyber Crime Junkies #cybersecurity #podcast

4 Jan 2026 · 1 min

Watch on YouTube

1:02

In this podcast excerpt, the host describes a hands‑on investigation of a malicious AI tool that creates full, multi‑page corporate websites with a single click. By entering a company name, the tool automatically generates a polished site featuring a headquarters image, logo, company description, executive officer profiles, and fabricated LinkedIn links. The investigator sandboxed the site, examined its source code to identify the specific AI generator, and validated the embedded links, discovering that all executive photos, biographies, and LinkedIn URLs were synthetic and non‑existent. The segment highlights how such AI‑driven synthetic sites can be weaponized for phishing attacks by presenting convincing but entirely fake corporate identities.

Chapters

So I opened up a sandbox and dropped in the webpage and this webpage came up with this company's name. It had a beautiful picture of their headquarters with their logo and everything. And it had a whole bunch of different, you know, about the company and executive officers and services and everything else. And so I start looking at it and start validating the links, right? And it had created, and I drilled down to figure out, I looked at the code to figure out which AI tool that they used, and it's an AI tool, one of many, that will, with one click, right, you put in your company name, whatever, it will generate. It'll generate it, right? An entire 10-layer webpage for you. And it'll put stuff in there. And so I figured out which one it was using. And I went to, for example, its executive officers. And it had the pictures, the bios, the LinkedIn. It wasn't a real LinkedIn link, but a LinkedIn. And all of this, and I did the research and they were all fake. They were all synthetic.