{"id":6579,"date":"2024-09-11T14:29:42","date_gmt":"2024-09-11T19:29:42","guid":{"rendered":"https:\/\/www.stratospherenetworks.com\/blog\/?p=6579"},"modified":"2024-09-11T14:29:42","modified_gmt":"2024-09-11T19:29:42","slug":"how-to-identify-ai-generated-phishing-emails","status":"publish","type":"post","link":"https:\/\/www.stratospherenetworks.com\/blog\/how-to-identify-ai-generated-phishing-emails\/","title":{"rendered":"How to identify AI-generated phishing emails"},"content":{"rendered":"

\"OneAn employee at a multinational finance firm received an email that appeared to be from the company\u2019s chief financial officer (CFO) instructing the recipient to participate in a confidential transaction, according to CNN<\/a>. The worker initially suspected fraud, but a subsequent video call with the CFO and colleagues convinced him to transfer approximately $25.6 million.<\/p>\n

However, it turned out that scammers had created the video call with deepfake technology, and the email was fraudulent after all. This is one example of how generative AI<\/a>, or genAI, has fueled sophisticated scams.<\/p>\n

While generative artificial intelligence<\/a> has made a positive impact on how we live and work in various ways, it also has its drawbacks. Aside from deepfakes, a significant disadvantage of the proliferation of genAI is that cybercriminals can churn out phishing emails faster and without the grammatical and spelling errors that used to serve as tell-tale signs of malicious messages.<\/p>\n

If you\u2019re an IT or business leader, that means safeguarding your organization against scammers and identifying AI-generated phishing emails is more difficult than ever. Here\u2019s what you should know about how genAI has transformed phishing and what you can do to spot and combat AI-powered fraud.<\/p>\n

Generative AI phishing: The dark side of large language models<\/h2>\n

In a May 2024 webinar<\/a> hosted by Stratosphere Networks and eSentire, John Moretti \u2013 a principal solutions architect for eSentire, noted that hackers have seized the opportunities presented by genAI to streamline phishing campaigns and ransomware attacks.<\/p>\n

Bad actors can now utilize AI to efficiently generate almost flawless, highly targeted spear phishing messages. The days when you could spot a suspicious overture due to subpar writing are over.<\/p>\n

\u201cWe actually saw a phishing attack where the email was almost totally legitimate,\u201d Moretti said during the webinar. \u201cThere was one character that was off.\u201d<\/p>\n

Research has shown that large language models (LLMs) like ChatGPT can completely automate phishing campaigns, lowering the cost of launching these types of criminal exploits by over 95 percent, according to the May 2024 Harvard Business Review article \u201cAI Will Increase the Quantity \u2014 and Quality \u2014 of Phishing Scams<\/a>.\u201d<\/p>\n

These AI-crafted messages also have a high rate of success: European security awareness training provider SoSafe<\/a> found that 78 percent of people open AI-authored phishing emails, and 21 percent go further by clicking on links or attachments.<\/p>\n

Subsequently, genAI has supported an explosion in phishing, with a 4,151 percent increase in malicious emails between ChatGPT\u2019s debut in November 2022 and March 2024, according to The State of Phishing 2024 report from SlashNext<\/a>.<\/p>\n

What are the warning signs of AI-generated phishing lures?<\/h2>\n

Unfortunately, as previously noted, generative AI\u2019s language skills mean keeping an eye out for grammatical and spelling errors will no longer save you from falling for phishing attempts. Still, there are common indicators that a message might not be legitimate.<\/p>\n

Here\u2019s what to watch out for, according to the Federal Bureau of Investigation (FBI)<\/a> and Cybersecurity and Infrastructure Security Agency (CISA)<\/a>.<\/p>\n