Attack Trends: How Phishing as a Service and AI have Revolutionised Email Bourn Attacks

Antonio Rancan, Senior Sales Engineer at Abnormal Security, discusses the advancements in email-based attacks, particularly those using generative AI. At Abnormal Security, they use behavioural data science to establish baselines of normal behaviour within organisations, allowing them to detect deviations that may indicate threats, including novel attacks that evade traditional defences. He highlights a shift from simple, bulk phishing attempts to more sophisticated and personalised attacks, emphasising the role of generative AI in automating these processes at scale. This evolution has made phishing attacks more convincing and harder to detect, posing significant challenges for organisations.

“Phishing as a service”, lowers the barrier to entry for cyber criminals looking to conduct phishing attacks. With various tools and services available on the dark web, even amateur criminals can deploy phishing campaigns without needing extensive technical skills. Examples include ready-made phishing kits and services that offer features to bypass security measures, such as…