A silver lining is that at least a lot of these AI generated malware and phishing scams are easy to disrupt with mild white hat skills. Often the people behind them lack the knowledge on how to prevent themselves from being disrupted by said white hats.

The most laughable I've seen was a scam that put a captcha on the frontend to stop me from flooding their free email system on the backend and rate limit them. However, the captcha was clientside only, so I didn't even notice until I looked to see if they rotated emails, but also the captcha was a textbox with the code set as the placeholder.

Truly the pinnacle of vibecoding a scam.