AI Supercharges Social Engineering Attacks Targeting Employees

AI-enabled social engineering attacks are on the rise, leveraging generative AI to automate and enhance the effectiveness of phishing attempts. These attacks exploit human trust and target employees through mobile devices, making them harder to detect. A report from Visa indicates that social engineering was responsible for the largest number of losses in the second half of last year. Generative AI tools allow attackers to create personalized messages, mimic executive writing styles, and adapt conversations in real time. The visibility gap in mobile communications further complicates detection for organizations. Deloitte predicts that AI-enabled fraud losses in the U.S. could reach $40 billion by 2027. The combination of immediacy and personal trust in mobile devices creates a favorable environment for these attacks. As a result, the scale of identity-based attacks has increased significantly, affecting multiple sectors and organizations.

Key Points: • AI tools are automating and enhancing social engineering attacks, making them more effective. • Mobile devices are the primary vector for these attacks, exploiting employee trust and quick response habits. • Deloitte forecasts AI-enabled fraud losses in the U.S. could reach $40 billion by 2027.