Reported by 2 outlets
Balonx Sistema PhaaS Targets 20+ Mexican Banks With AI Vishing and Android RAT
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.20 / 2.0 · best outlet weight
- Severity
- 0.50 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.59 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
Balonx Sistema PhaaS Targets 20+ Mexican Banks With AI Vishing and Android RAT
cyberpress.org · 48d ago · August 26th, 2026
Mexico’s financial sector is facing a growing phishing threat from Balonx Sistema, a Phishing-as-a-Service (PhaaS) platform targeting more than 20 banks. The operation combines real-time phishing, Android malware, rotating domains, and AI-powered voice fraud to steal banking credentials and financial data. Group-IB researchers identified Balonx as a subscription-based criminal service operated by an individual in Mexico. The platform reportedly harvested credentials and financial information from more than 1,100 victims since at least October 2025. It is advertised through Facebook groups linked to telemarketing fraud and recruits affiliates through Telegram. Balonx offers weekly plans, allowing criminals with limited technical skills to launch banking scams. Its Individual Plan supports two devices, while its Office Plan enables up to eight subordinate accounts. Payments are automated using cryptocurrency exchange services, helping the operators run the platform like a commercial SaaS business. Balonx Targets Mexican Banks Unlike ordinary phishing kits that only collect credentials through a fake webpage, Balonx maintains a persistent WebSocket connection between the victim’s phishing page and the attacker’s control panel. This enables criminals to monitor victims in real time and alter the page during an active session. Landing page of the Balonx Sistema PhaaS kit, showing its multi-bank target selection portal (Source: group-ib) Operators can push up to 14 fraudulent scree
-
update from gbhackers.com
AI-Powered Balonx Sistema PhaaS Harvests Credentials From Over 1,100 Banking Users
gbhackers.com · 48d ago · August 26th, 2026
[…] The post AI-Powered Balonx Sistema PhaaS Harvests Credentials From Over 1,100 Banking Users appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .