A new report by ReliaQuest highlights that AI is making cyberattacks cheaper, faster, and more covert, while not fundamentally changing the nature of intrusions. Over the past two years, AI utilization in cybercrime has evolved from basic phishing enhancements to more sophisticated applications, including deepfake services and AI-assisted scripts.
AI is now embedded in attack workflows, aiding in creating phishing pages, web shells, and social engineering content, while also acting as a lure for malicious extensions. Threat actors use AI for various means including extortion and fraud, leveraging its efficiency. The report outlines six key methods of AI use in cyberattacks, such as scaling phishing attacks, producing malicious tools quickly, and creating fake identities.
To counter these threats, security teams should focus on strong fundamentals, automate detections, retrain users on AI deceptions, and invest in threat research.