The cybersecurity industry is sounding alarm bells over the growing use of artificial intelligence by cybercriminals to automate and scale phishing attacks to an unprecedented degree. Security researchers have identified multiple criminal operations that are leveraging large language models to generate highly personalized phishing emails at a scale and speed that would be impossible for human operators alone.

These AI-powered phishing platforms — some of which are being marketed and sold on dark web forums — allow criminals to input a target's name, employer, recent public activity, and other details harvested from social media and data brokers. The AI then automatically generates convincing, contextually appropriate phishing messages tailored to each individual target.

"We're seeing a fundamental shift in the economics of phishing," said threat intelligence director Ingrid Svensson. "What used to require a sophisticated operator to craft carefully is now being industrialized. The barrier to launching convincing, targeted attacks has dropped dramatically."

The volume of phishing attacks observed in the past quarter has increased by over 200% compared to the same period last year, according to data from multiple security firms. More concerning, the success rate of these AI-generated messages is significantly higher than traditional mass phishing campaigns.

Organizations are being urged to invest in AI-powered email security solutions capable of detecting AI-generated content, to implement robust multi-factor authentication, and to conduct regular employee security awareness training that addresses the latest phishing techniques.