ARSTECHNICA.COM
AI-generated phishing emails are getting very good at targeting executives
Pay close attention AI-generated phishing emails are getting very good at targeting executives Hyper-personalized emails use "an immense amount" of scraped data. Stephanie Stacey, Financial Times Jan 2, 2025 9:24 am | 1 This is definitely not a Razer mousebut you get the idea. Credit: calvio via Getty Images This is definitely not a Razer mousebut you get the idea. Credit: calvio via Getty Images Story textSizeSmallStandardLargeWidth *StandardWideLinksStandardOrange* Subscribers only Learn moreCorporate executives are being hit with an influx of hyper-personalized phishing scams generated by artificial intelligence bots, as the fast-developing technology makes advanced cyber crime easier.Leading companies such as British insurer Beazley and ecommerce group eBay have warned of the rise of fraudulent emails containing personal details probably obtained through AI analysis of online profiles.This is getting worse and its getting very personal, and this is why we suspect AI is behind a lot of it, said Beazleys chief information security officer Kirsty Kelly. Were starting to see very targeted attacks that have scraped an immense amount of information about a person.Cyber security experts said the increasing attacks come during a period of rapid advancement for AI technology, as tech companies race to create ever more sophisticated systems and launch popular products for consumers and businesses.AI bots can quickly ingest large quantities of data about the tone and style of a company or individual and replicate these features to craft a convincing scam.They can also scrape a victims online presence and social media activity to determine what topics they may be most likely to respond tohelping hackers generate bespoke phishing scams at scale.The availability of generative AI tools lowers the entry threshold for advanced cyber crime, said eBay cyber crime security researcher Nadezda Demidova. Weve witnessed a growth in the volume of all kinds of cyber attacks, particularly in polished and closely targeted phishing scams, she added.Kip Meintzer, an executive at security company Check Point Software Technologies, told a recent investor conference that AI had given hackers the ability to write a perfect phishing email.More than 90 percent of successful cyber attacks begin with a phishing email, according to the US Cybersecurity and Infrastructure Security Agency. As these attacks become more sophisticated, their consequences have become increasingly expensive, with the global average cost of a data breach rising nearly 10 percent to $4.9 million in 2024, according to IBM.Researchers have warned that AI is particularly effective for crafting business email compromise scamsa specific type of malware-free phishing where fraudsters trick recipients into transferring funds or divulging confidential company information. This kind of scam has cost victims worldwide more than $50 billion since 2013, according to the FBI.AI is being used to scan everything to see where theres a vulnerability, whether thats in code or in the human chain, said Sean Joyce, global cyber security lead at PwC.Phishing scams generated using AI may also be more likely to bypass companies email filters and cyber security training.Basic filters, which generally block repeated bulk phishing campaigns, may struggle to track these scams if AI is used to rapidly generate thousands of reworded messages, said eBays Demidova. 2025 The Financial Times Ltd. All rights reserved. Not to be redistributed, copied, or modified in any way.Stephanie Stacey, Financial TimesStephanie Stacey, Financial Times 1 Comments
0 Reacties 0 aandelen 71 Views