In October 2026, Zscaler ThreatLabz researchers described a campaign in which attackers combined the ARTEX penetration-testing framework, AI coding assistants and custom automation scripts. It sounds like news for a security team, but it concerns anyone with a card and a crypto wallet: such tools lower the barrier to entry and make phishing pages, emails and fake services more polished and convincing.

What happened

According to ThreatLabz, the attackers used ARTEX as a framework for reconnaissance and preparation, while AI coders and automation helped assemble auxiliary scripts faster. The report notes the campaign was targeted — attacks were not a broad spam blast, but selective. What matters for us is not the list of victims but the approach: attacker routine is speeding up, and the quality of fakes is rising.

Why it matters to card and wallet holders

AI does not crack your card — it helps a fraudster build a convincing site, email or credential-entry form faster. After that it is business as usual: the person enters the card number, the SMS code, the seed phrase or the exchange password. So protection remains in your hands, but it demands a little more attention to detail.

  • Check the address, not the design. A pretty checkout page means nothing: look at the domain, HTTPS and whether it matches the service's official site.
  • Do not enter details via a link from an email or chat. Open the service manually — through a bookmark or the app.
  • 2FA only in an app or hardware key. SMS codes are easier to intercept; for exchanges and email, choose an authenticator app.
  • A separate card for subscriptions. A virtual card with a limit and a small balance caps the damage if details still leak.

Fraudulent subscriptions and 'trial periods'

Subscriptions are a separate story. Fake 'trial periods' for streaming, AI services and games ask for a card and charge money after cancellation. Keep the habit: before signing up, check the cancellation terms, and for trials use a card with a minimal balance. If a charge happens without your consent, contact the service's support first, then the card issuer.

If your details did leak

  1. Block the card in the app immediately and issue a new one.
  2. Change the service password and enable 2FA if it was off.
  3. For a crypto wallet: if the seed phrase leaked, it is safer to create a new wallet and move funds — treat the old one as compromised.
  4. Review the transaction history and save screenshots for support.

What to do in practice

Virtual cards are convenient precisely because they let you split payments: one card for subscriptions, another for one-off purchases, a third for crypto services. Keep only the needed amount on each and set limits in the app. That way, even a neatly built phishing page cannot reach your main funds.

FAQ

Does AI now crack cards automatically? No. AI helps attackers prepare phishing pages and scripts faster, but a human still enters the details. Defense is domain checks, 2FA and a separate card for subscriptions.

What if I entered data on a suspicious site? Block the card, issue a new one, change passwords and enable 2FA. For a wallet, if the seed phrase leaked, create a new wallet and move funds.

This material is educational and is not financial advice. Service and company names belong to their rights holders and are mentioned only to describe a protection scenario.

Payment guides

VirtCardPay

A virtual card in 2 minutes

Pay for subscriptions, AI tools, travel, and international stores. Top up with USDT or TON.

Open in Telegram Learn more about the service →

Sources

This material is for informational purposes only and is not financial advice. Data and service terms may change, so check primary sources before making a payment or investment decision. Mentions of third-party brands and services do not imply official partnership, support, or endorsement by VirtCardPay; partner platforms are marked with a “Partner” badge.
Back