A sophisticated cybercrime-as-a-service platform named ATHR is being distributed on underground forums. Merging Asterisk-based telephony with AI-generated voice synthesis, ATHR automates the execution of Telephone-Oriented Attack Delivery campaigns to compromise enterprise credentials and bypass multi-factor
Attacker sends realistic plain-text templates with custom security alerts and toll-free numbers but no URLs.
Victim dials helper; call handles via WebRTC routed to the operator interface and AI engine.
Cartesia Sonic 3 TTS executes a simulated, conversational helpdesk recovery workflow.
The attacker initiates a real login request, and the voice agent prompts the user to read back the generated MFA token.
Operator logs in with harvested session tokens, revokes user devices, and pivots laterally.
If your team may be exposed to a similar threat, FemtoSec can help validate blast radius, prioritize remediation, and connect the issue to a practical security program.