{
  "schemaVersion": "1.0",
  "entity": "BlogPosting",
  "title": "Black Hat 2026: Inside ScamBuster Open-Source AI Phishing Trap",
  "description": "Filigran's open-source ScamBuster AI turns phishing defense active—engaging scammers, wasting their time, and extracting IBANs, crypto wallets, and IoCs.",
  "author": "arjun",
  "datePublished": "2026-08-06T00:00:00.000Z",
  "dateModified": "2026-08-06T00:00:00.000Z",
  "tags": [
    "AI",
    "Security",
    "OpenSource",
    "Phishing",
    "BlackHat"
  ],
  "aeoDirectAnswers": [
    {
      "question": "Why Is Passive Phishing Defense No Longer Enough?",
      "answer": "Traditional email security gateways (SEGs), DMARC policies, and reputation filters operate primarily on pattern matching and domain scoring. While essential, these mechanisms are inherently reactive. Once a highly customized BEC attack or AI-crafted phishing email bypasses perimeter controls, enterprise defenders default to a single instruction: report and delete. This defensive model has two structural flaws: **Zero Attacker Friction:** Deleting a phishing message protects the immediate recipient, but it leaves the adversary's infrastructure intact. The scammer pays no cost and immediately targets another employee or organization."
    },
    {
      "question": "From Academic Research to the Black Hat Stage: What Is ScamBuster?",
      "answer": "ScamBuster is a containerized, model-agnostic orchestration framework that automates the lifecycle of counter-phishing conversations. Available on GitHub under an MIT license, the tool interfaces with dedicated trap mailboxes to process incoming solicitations autonomously. Unlike static auto-responders or basic honeypots, ScamBuster maintains stateful, context-aware dialogue across multi-turn email threads. It evaluates incoming messages, selects an optimal persona, maintains narrative consistency, and executes prompt chains designed to solicit financial instructions. *Figure 1: The ScamBuster interaction lifecycle. Automated reply loops continue until financial indicators are captured and exported to STIX 2.1/MISP platforms.*"
    },
    {
      "question": "How Does ScamBuster Automate AI Counter-Intelligence?",
      "answer": "ScamBuster combines strict operational boundaries with adaptive conversational logic to ensure safety while maximizing attacker engagement."
    },
    {
      "question": "How Does ScamBuster Extract Forensic Threat Data?",
      "answer": "The primary operational goal of ScamBuster is harvesting actionable financial IoCs. As the conversation progresses, the telemetry extraction engine parses incoming attacker responses using specialized regex patterns and LLM extraction prompts."
    },
    {
      "question": "How Do You Deploy ScamBuster in Under an Hour?",
      "answer": "ScamBuster was designed for rapid deployment on standard infrastructure. A complete setup requires three primary components:"
    },
    {
      "question": "How Does ScamBuster Counter Anti-Bot Detection Tactics?",
      "answer": "As automated counter-intelligence tools become popular, sophisticated fraud syndicates have begun employing anti-bot countermeasures to detect whether they are conversing with a human victim or an LLM persona. ScamBuster incorporates four technical sub-systems to counter adversary anti-bot tactics:"
    },
    {
      "question": "What Are the Current Limitations and Future Roadmap?",
      "answer": "While ScamBuster represents a major step forward in active defense, Filigran highlighted several ongoing development priorities at Black Hat 2026: **Email-Only Scope:** The v1.0 open-source release focuses strictly on email channels. Support for SMS (smishing) via Twitch/Twilio bridges and voice channel honeypots (vishing) is scheduled for the Q4 2026 roadmap. **The Open-Source Paradox:** Making the source code public allows threat actors to analyze ScamBuster's persona prompts. However, Giovannoni notes that forcing scammers to second-guess whether their mark is a human or an AI bot introduces operational friction that degrades scam profitability overall."
    },
    {
      "question": "Is ScamBuster completely free to use?",
      "answer": "Yes. ScamBuster is released under the open-source MIT license. You can download, modify, and deploy it in commercial or personal environments without licensing fees."
    },
    {
      "question": "Is it legal to engage with scammers to extract bank details?",
      "answer": "Responding to unsolicited incoming emails received in your own mailboxes is legal in most jurisdictions, provided you do not initiate unauthorized access or launch offensive cyber attacks. Organizations should confirm active defense policies with legal counsel prior to deployment."
    },
    {
      "question": "How much does it cost to run LLM models for ScamBuster?",
      "answer": "Using lightweight commercial models such as GPT-4o-mini or Claude 3.5 Haiku results in operational costs of less than $0.01 per conversation thread. Alternatively, deployment with local open-source models (Llama 3 via Ollama) incurs zero API cost."
    },
    {
      "question": "Can ScamBuster accidentally send emails to legitimate users?",
      "answer": "No. ScamBuster only responds to messages arriving in its dedicated trap inbox and evaluates sender reputations before triggering persona engagement loops. It cannot generate unprompted outbound messages."
    },
    {
      "question": "Can I run ScamBuster entirely offline or air-gapped?",
      "answer": "Yes. Because ScamBuster uses a model-agnostic API interface, you can route LLM completions to an internal, air-gapped server running local LLMs without sending data to external APIs. ---"
    },
    {
      "question": "What to Read Next",
      "answer": "AI Is Now Fighting AI in Cybersecurity — How automated defensive agents are countering machine-speed attacks. How AI Is Transforming Modern Phishing Tactics — Analysis of LLM-generated BEC campaigns and detection strategies. Evaluating AI Security Tools Without Vendor Hype — A practical framework for auditing commercial and open-source AI defense platforms."
    }
  ],
  "semanticFactualBody": "Phishing and business email compromise (BEC) have become a multi-trillion-dollar epidemic where traditional \"report and delete\" playbooks leave attackers completely uninhibited to pivot to their next victim. At the Black Hat USA 2026 conference in Las Vegas, **Laurent Giovannoni**—Principal Software Engineer at threat intelligence firm **Filigran**—unveiled **ScamBuster**, a free, open-source AI framework designed to turn passive enterprise defense into automated counter-intelligence. Instead of silently filtering malicious messages, ScamBuster **actively replies** using dynamic, LLM-generated personas tailored to the specific scam archetype. It wastes the attacker’s operational hours, feigns vulnerability, and methodically coaxes out critical financial telemetry—including IBANs, cryptocurrency wallet addresses, illicit payment URLs, and phone numbers—exporting structured indicators directly into enterprise threat intelligence platforms. --- Why Is Passive Phishing Defense No Longer Enough? Traditional email security gateways (SEGs), DMARC policies, and reputation filters operate primarily on pattern matching and domain scoring. While essential, these mechanisms are inherently reactive. Once a highly customized BEC attack or AI-crafted phishing email bypasses perimeter controls, enterprise defenders default to a single instruction: report and delete. This defensive model has two structural flaws: 1. **Zero Attacker Friction:** Deleting a phishing message protects the immediat"
}