LATIDIA · Ciberseguridad

PhishGen: comprensión de las capacidades de LLM en la generación automatizada de sitios web de phishing

arXiv: 2610.30226v1Announce Type: new Resumen: El phishing se basa en el engaño visual, que tradicionalmente requiere habilidades de desarrollo web o kits preconstruidos. Los LLM erosionan esta barrera al generar sitios web funcionales a partir de natura

La noticia

arXiv:2610.30226v1 Announce Type: new Abstract: Phishing relies on visual deception, traditionally requiring web-development skills or pre-built kits. LLMs erode this barrier by generating functional websites from natural-language prompts, yet prior work does not answer how far LLM-driven generation actually reaches: functionality is assessed by inspection rather than execution; visual fidelity is scored by automated metrics or a few internal coders rather than the humans such pages aim to deceive; evaluation is confined to commercial models; and no study benchmarks generated pages against phishing kits deployed in the wild. We present PhishGen, a framework that evaluates the appearance fidelity and end-to-end functionality of LLM-generated phishing pages. PhishGen constructs prompts across three