AI-Enabled Phishing

AI-enabled phishing refers to social engineering attacks that leverage machine learning and generative AI to create highly personalized, convincing fraudulent messages at scale. These attacks use AI to analyze victim data, generate contextually relevant content, and automate the discovery of targets, making traditional email filters and user awareness training less effective. For enterprise governance teams, AI-enabled phishing represents a critical security risk that requires updated incident response protocols, enhanced authentication controls, and continuous monitoring of AI model outputs used in customer-facing communications to prevent misuse.

1 item

ResearchGlobal2026-08-25

Voice AI PhaaS Platform Harvests Corporate Credentials for $0.10 Per Call

A phishing-as-a-service platform called AnonyMousKIT uses voice AI agents to impersonate Apple Support and steal device passcodes and credentials from targeted users. The platform has been active since early 2024, operates across 506 domains and 168 reseller storefronts, and has been linked to targeted campaigns against corporate and government organizations. Compromised credentials can expose iCloud backups, Keychain-stored passwords, and corporate email accounts.

AI-enabled phishing voice AI agents credential theft PhaaS social engineering enterprise risk Apple SOCRadar