As malicious phishing emails continue to plague email users worldwide, a groundbreaking solution has emerged to turn the tables on these cyber scammers. ScamBuster, an open-source AI-driven system created by Laurent Giovannoni, principal software engineer at Filigran, is designed to engage with phishing attackers, gathering valuable data on their operations and tactics. This innovative approach could be a game-changer in the fight against email scams.
For most organizations, dealing with phishing attacks means deleting the emails before they can cause harm. However, this doesn’t address the root problem: these scammers continue to operate with impunity, using social-engineering tactics to dupe unsuspecting victims into handing over sensitive information or money. ScamBuster flips this script by responding to scam emails as if they were legitimate messages, creating a persona that mimics a real victim. This allows organizations and law enforcement agencies to collect essential data on the attackers’ infrastructure, financial details, and other crucial indicators.
Giovannoni’s inspiration for ScamBuster came from personal experience – his friends had fallen prey to phishing attacks, prompting him to create this system as part of his thesis at École Polytechnique. The software has been in production since November 2025, with a formal unveiling planned for Black Hat USA 2026 in Las Vegas.
ScamBuster’s architecture is designed to be inbound-only, meaning it never initiates contact but only responds to incoming emails. When an attacker sends a phishing email, ScamBuster takes over, engaging the scammer in conversation through its AI-driven persona. The system identifies and collects indicators of the attackers’ infrastructure, such as bank account numbers, payment domains, or phone number prefixes. These indicators are then clustered together, creating a profile of a cybercriminal business that investigators can use to launch further action.
The ultimate goal of ScamBuster is to provide valuable intelligence on phishing operations, helping organizations and law enforcement agencies to identify patterns and connections between separate scams. By doing so, it enables them to disrupt the scammers’ infrastructure and bring these cybercrimes to justice.
ScamBuster’s impact could be significant in the fight against email scams. No longer will scammers be able to operate with impunity, using fake personas to dupe victims into handing over sensitive information or money. Instead, they’ll find themselves being “scammed” by ScamBuster, providing valuable data that can help investigators take down their operations.
For organizations and individuals, this means a renewed focus on cybersecurity education – learning how to identify phishing attacks and respond appropriately. ScamBuster may not eliminate the problem entirely, but it offers a powerful tool for tracking and disrupting these cybercrimes. As email scams continue to plague users worldwide, ScamBuster’s innovative approach is a beacon of hope in the fight against these malicious actors.
As you navigate the complex world of cybersecurity, remember that ScamBuster represents a new frontier in combating phishing attacks. By understanding how this system works and its potential impact on cybercrime operations, we can better equip ourselves to stay one step ahead of these scammers.
Source: Dark Reading — 2026-07-13