: Using pre-recorded scripts or AI-generated voices, the bot creates a sense of urgency (e.g., claiming there is "suspicious activity" on an account) to pressure the victim into entering their 2FA code.

OTP bots automate the process of stealing one-time passwords from unsuspecting users. They are primarily used to gain unauthorized access to financial accounts, social media, and cryptocurrency wallets.

While specific details on the "PointX" variant are localized to underground communities, these kits typically include:

: Once the victim inputs the code into their phone or a fake website, the bot captures it and immediately relays it to the attacker, who uses it to log in before the code expires. Components of the "PointX" Kit