--- title: AI-Assisted Phishing Campaign Harvesting Victim Data description: Cyble Research & Intelligence Labs has uncovered an active phishing campaign hosted on edgeone.app infrastructure that goes beyond credential theft. Using... canonical: https://daily.dev/posts/ai-assisted-phishing-campaign-harvesting-victim-data-nwz2lwx8c twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: AI-Assisted Phishing Campaign Harvesting Victim Data | daily.dev og:description: Cyble Research & Intelligence Labs has uncovered an active phishing campaign hosted on edgeone.app infrastructure that goes beyond credential theft. Using... og:url: https://daily.dev/posts/ai-assisted-phishing-campaign-harvesting-victim-data-nwz2lwx8c og:image: https://api.daily.dev/og/posts/Nwz2LWx8C.png og:image:alt: AI-Assisted Phishing Campaign Harvesting Victim Data og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # AI-Assisted Phishing Campaign Harvesting Victim Data **[Cyble](https://daily.dev/sources/cyble)** · 10 min read · 0 upvotes · 0 comments ## Summary Cyble Research & Intelligence Labs has uncovered an active phishing campaign hosted on edgeone.app infrastructure that goes beyond credential theft. Using deceptive lures like 'ID Scanner,' 'Telegram ID Freezing,' and 'Health Fund AI,' the campaign tricks users into granting browser-level camera, microphone, and contact permissions. Once granted, embedded JavaScript silently captures photos, video, audio, device fingerprints, geolocation, and contact lists, then exfiltrates everything to attacker-controlled Telegram bots via the Telegram Bot API. The campaign impersonates TikTok, Telegram, Instagram, Google Chrome/Drive, and Flappy Bird. Code analysis suggests AI-assisted development, evidenced by structured annotations and emoji-based formatting in the malicious scripts. Harvested biometric and multimedia data could enable identity fraud, deepfake attacks, video-KYC bypass, extortion, and targeted social engineering. MITRE ATT&CK techniques and IOCs are provided. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [AI-Powered Social Engineering: The New Cybercrime Playbook \| Cyber Codex](https://daily.dev/posts/ai-powered-social-engineering-the-new-cybercrime-playbook-cyber-codex-8oxijozcr) · InfoSec Write-ups · 2 upvotes · 0 comments - [Security shifts to the human layer as AI scams surge](https://daily.dev/posts/security-shifts-to-the-human-layer-as-ai-scams-surge-uermo5dgq) · CSO Online · 0 upvotes · 0 comments - [AI agents can spill secrets via malicious link previews](https://daily.dev/posts/ai-agents-can-spill-secrets-via-malicious-link-previews-fjdo46xiv) · The Register · 2 upvotes · 0 comments - [Social Engineering in the Age of Synthetic Media](https://daily.dev/posts/social-engineering-in-the-age-of-synthetic-media-ql00uvqyg) · Recorded Future Blog · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber), [#phishing](https://daily.dev/tags/phishing), [#telegram](https://daily.dev/tags/telegram) [View this post on daily.dev](https://daily.dev/posts/ai-assisted-phishing-campaign-harvesting-victim-data-nwz2lwx8c) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"AI-Assisted Phishing Campaign Harvesting Victim Data","url":"https://daily.dev/posts/ai-assisted-phishing-campaign-harvesting-victim-data-nwz2lwx8c","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/ai-assisted-phishing-campaign-harvesting-victim-data-nwz2lwx8c"},"datePublished":"2026-03-16T06:08:18.255Z","dateModified":"2026-03-16T06:08:49.758Z","description":"Cyble Research & Intelligence Labs has uncovered an active phishing campaign hosted on edgeone.app infrastructure that goes beyond credential theft. Using...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/9880becca41b9eca0844f0f84b234306?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/9880becca41b9eca0844f0f84b234306?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Cyble","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Cyble","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/345d6009096c4c2da164d9d8e6ccfbe6","url":"https://daily.dev/sources/cyble"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/ai-assisted-phishing-campaign-harvesting-victim-data-nwz2lwx8c","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cyber,phishing,telegram","timeRequired":"PT10M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Cyble","item":"https://daily.dev/sources/cyble"},{"@type":"ListItem","position":3,"name":"AI-Assisted Phishing Campaign Harvesting Victim Data"}]} ```