How threat actors are using AI and other modern tools to enhance their phishing attempts
Summary: Cisco Talos describes phishing as the most popular form of social engineering, delivered through email, SMS, phone calls, social media apps including LinkedIn, Instagram, Facebook, Telegram, Discord and Twitter, and QR codes, with subtypes including spear phishing, whaling, smishing, quishing and vishing. The article states attackers are using AI apps such as ChatGPT, which will generate convincing phishing content when a request is phrased differently, and warns that voice cloning and deepfake technology are expected to play a role in future phishing attacks.
Why it matters: Talos notes that sending only a handful of customized phishing emails is orders of magnitude harder for network defenders to prevent than high-volume campaigns, and that freely available open-source information and breach data give attackers the material to personalize each one.
Read the original at Cisco Talos ↗
- Topics
- Phishing & Social Engineering
- Related
- US disrupts North Korean campaign behind $400 million crypto theft Cyber Risks · Nov 14, 2026North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure Cyber Risks · Nov 13, 2026FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls Cyber Risks · Nov 13, 2026