AI-generated emails make up 40% of BEC lures, security firm says

A recent study by cybersecurity firm Ironscales reveals that 40% of business email compromise (BEC) lures are now generated using artificial intelligence (AI), highlighting a significant shift in phishing tactics. These AI-generated emails, often indistinguishable from those written by humans, pose a growing challenge for security professionals. The study underscores the sophistication and volume of these attacks, noting that AI enables cybercriminals to craft personalized and convincing phishing emails at scale.

The rise in AI-generated phishing emails is part of a broader trend in which cybercriminals increasingly leverage AI to enhance the effectiveness of their campaigns. These attacks typically exploit the ability of AI to generate realistic language and adapt to different contexts, making it harder for traditional email security measures to detect and block them.

The report also emphasizes the need for enhanced security measures, including advanced AI-driven email security solutions that can recognize and respond to the evolving threat landscape. Security professionals are encouraged to adopt comprehensive training programs to better equip employees to recognize and respond to phishing attempts, even those that are AI-generated.

SC Magazine 08/01/2024