Tailored phishing

Category: Bad Actors

Phishing is a social engineering attack "that aims to collect secure information or install malware via a digital message purporting to be from a trusted party such as the user's bank." (Caldwell, 2020) AI can be used to make a phish almost indetectable to recipients by matching matching their social history and preferences. Additionally, it can be used to determine in general which types of phish are more effective. Institutions need to protect themselves against fraudulent activity, where such activity may involve various sorts of academic misconduct such as altering grades and producing fake transcripts. Institutions also have to protect against their data being used to help produce phishing attacks.

Examples and Articles

AI-enabled future crime | Crime Science | Full Text
"Taxonomy of criminal applications for the purpose of assessing their relative threat levels." M. Caldwell, J. T. A. Andrews, T. Tanay, L. D. Griffin, Crime Science, Direct Link

AI Wrote Better Phishing Emails Than Humans in a Recent Test
"Researchers found that they could use the deep learning language model GPT-3, along with other AI-as-a-service platforms, to significantly lower the barrier to entry for crafting spearphishing campaigns at a massive scale." Lily Hay Newman, Wired, 08.07.2021 Direct Link

Do you have another example of Tailored phishing? Suggest it here

Force:yes