The new phishing campaign, known as Astaroth, "distinguishes itself by not only intercepting login credentials but also by rapidly capturing 2FA authentication tokens and session cookies as they are generated," researchers added.
EMAIL users have been warned of a dangerous new phishing attack that swipes their login details and accesses accounts.
Users then, unknowingly, enter their login details into the fake page, handing access to their accounts to fraudsters.
FBI Special Agent in Charge, Robert Tripp, said: "Attackers are leveraging AI to craft highly convincing voice or video messages and emails to enable fraud schemes against individuals and businesses alike.
"Astaroth significantly raises the bar, rendering conventional phishing methods and their inherent security measures largely ineffective," said researchers.
