LLMMedium
Cybercriminals Reportedly Exploited Google’s G.Co Subdomain and Spoofed Caller ID in AI-Driven Phishing Attack on Hack Club Founder
- Occurred
- Feb 20, 2025
- Published
- Jan 28, 2025
- Source
- AI Incident Database
Summary
Hack Club founder Zach Latta was reportedly targeted in an AI-assisted phishing attack exploiting Google’s own systems. Cybercriminals allegedly spoofed a legitimate Google Assistant number and used voice cloning to impersonate support staff, claiming unusual login activity from Frankfurt. They reinforced the deception by sending a real email from Google’s Workspace domain. The attack, which relied on Google’s g.co subdomain, was thwarted when inconsistencies raised Latta’s suspicions.
Developers
- Synthetic audio generation technology
Deployers
- Voice phishers
- Scammers impersonating Google staff
- Scammers
Harmed parties
- Zach Latta
- Google users
Tags
- Voice cloning fraud
- Impersonation
- Scam
- Voice phishing
- Credential theft
- Identity theft
- Spoofing
- Subdomain manipulation
Classification
Category confidence: 90%
Severity confidence: 85%
Rationale: AI voice cloning and phishing exploit LLM capabilities, but attack was thwarted with no confirmed harm.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8