The use of artificial intelligence by cybercriminals is making phishing attacks more sophisticated and harder to detect. A recent study by Kaspersky found that 49% of organizations have seen an increase in cyberattacks, with phishing being the most common threat. AI allows cybercriminals to personalize phishing emails, creating messages tailored to an individual’s role and interests.
Attackers can use publicly available data from social media or company websites to craft highly convincing emails that often mimic internal communications from executives. Deepfake technology is also being used to create realistic audio and video impersonations, making attacks even more credible. In one case, a deepfake was used to trick an employee into transferring $25.6 million.
Traditional email filters are having a hard time keeping up with these new tactics. AI can manipulate email scripts to bypass security software and refine attacks in real-time to improve success rates. This makes even experienced employees more vulnerable to these increasingly sophisticated attacks.
Generative AI heightens phishing threats
To combat AI-driven phishing, organizations need to adopt a multi-layered cybersecurity approach. This should include regular AI-focused awareness training for employees, advanced security tools, and a zero-trust security model to limit potential damage if an attack succeeds.
Experts say that as AI technology continues to evolve, both its potential for good and its capacity for misuse will expand. Organizations must stay ahead of the curve by adopting proactive and adaptive cybersecurity strategies to protect their assets and personnel from increasingly sophisticated cyber threats. The Better Business Bureau warns that scammers are now using AI to create identical but fake versions of legitimate websites.
These fraudulent sites can be very convincing, making it difficult for consumers to tell them apart from the real ones. The BBB says these scams are designed to steal personal information, including credit card numbers and login credentials. To stay safe online, the BBB urges consumers to double-check website URLs, look for security indicators such as HTTPS, and be wary of sites that request unusual amounts of personal information.
Taking these precautions can help you avoid falling victim to these increasingly sophisticated scams.
Rashan is a seasoned technology journalist and visionary leader serving as the Editor-in-Chief of DevX.com, a leading online publication focused on software development, programming languages, and emerging technologies. With his deep expertise in the tech industry and her passion for empowering developers, Rashan has transformed DevX.com into a vibrant hub of knowledge and innovation. Reach out to Rashan at [email protected]
