Skip to content
InfoResearchPreprintLLM-specific

PhishGen: Understanding LLM Capabilities in Automated Phishing Website Generation

Published
Record updated
View JSON

Summary

PhishGen is a framework that evaluates how well LLM-generated phishing pages match real pages visually and how many work end to end. Across 14 LLMs and 64 real-world phishing kits, 96.2% of safeguard-bypassing outputs render, but only 38.7% complete the full credential-harvesting pipeline. GPT 4.1 reaches 86.3 to 94.1% functional success, while uncensored models rarely exceed 45.4%.