Nearly 40,000 Phishing Attacks Target US Financial Firms in First Half of 2026

How Free Hosting and AI Are Lowering Barriers for Cybercriminals

US financial institutions faced close to 40,000 phishing URLs during the first six months of 2026, according to ProSecurity data. The surge was driven by automated AI agents and a newly identified bulletproof hosting service based in Seychelles. One in eight of these malicious links used free hosting platforms to evade detection and lower operational costs for attackers.

The rise in AI-powered phishing tools allowed threat actors to generate highly convincing fake banking pages at scale. These automated systems mimicked legitimate customer service interactions, tricking users into revealing login credentials and financial details. Meanwhile, the Seychelles-based host provided resilient infrastructure resistant to takedown efforts, enabling prolonged attack campaigns.

What Makes the Seychelles Hosting Service Particularly Challenging?

Attackers increasingly rely on free web hosting services to deploy phishing sites quickly and cheaply. This tactic reduces overhead and complicates tracking, as domains can be abandoned and replaced within minutes. Combined with AI-generated content that adapts to target language and branding, these methods have made phishing more efficient and harder to detect using traditional filters.

The Seychelles bulletproof host operates with minimal cooperation to international cybersecurity authorities. It ignores abuse complaints and continues to serve malicious content even after repeated reports. This resilience allows cybercriminals to maintain long-term phishing operations without fear of sudden shutdowns, increasing the success rate of their schemes.

What types of financial institutions were most targeted? Banks and online payment platforms were the primary targets, with attackers focusing on stealing customer account information and enabling fraudulent transactions.

Frequently Asked Questions

Can AI-generated phishing be identified by users? While some AI phishing attempts contain subtle errors, many are now nearly indistinguishable from legitimate communications, making user vigilance and multi-factor authentication essential.

Are free hosting providers taking action against abuse? Some free hosting services have improved monitoring and response times, but the sheer volume and rapid turnover of malicious sites limit the effectiveness of current measures.