AUGUST 2024ENTERPRISE SECURITY| | 9context. A payment that is due or an event that is soon to happen can be leveraged to lure the victim into divulging personal or financial information. Voice cloning using AI can mimic a genuine voice with extremely high accuracy and can fool unsuspecting victims into falling prey to nefarious schemes.A recent study revealed that threat actors are increasingly using zero hour attacks, of which spear phishing credential harvesting was the majority. Using previously failed attempts and by leveraging machine learning, they bombard organizations with a large volume of targeted phishing attacks increasing the likelihood of compromise. These phishing attacks contain link-based attacks, attachments that are malicious and natural language threats.Turning the tables with the same new age toolsHowever, there is hope; fire can be fought with fire. AI is now being increasingly used to detect phishing and spear phishing emails generated by AI itself. Machine learning algorithms can be trained using a large pool of normal emails contrasted with another large set of phishing emails to detect patterns and anomalies. Social graph analysis can be used to establish normal communication flows, email communication profiles to understand normal style and tone. Analysis of email structure helps understand technical aspects of an email that can be used to create a baseline for the machine learning algorithm to detect anomalies.Content analysis can be done by AI to detect phishing emails. Using content such as greetings, sense of urgency, links and attachments and requests for sensitive information in emails, red flags can be raised, and threats detected. Natural language processing, which involves looking at the sender and subject names, email content, locations and company names, is also used by ML to detect a potential phishing attack. Convolutional Neural Network can detect manipulated images within the body of an email. Thus, the power of AI can be used for good to track and stop the bad guys in their tracks before they can do damage. Note that improving machine learning to detect AI crafted phishing emails is a continuous process. These models can be improved continuously to detect evolving threats by training the ML algorithm. This feedback training makes these ML models efficient, which in turn helps ML-powered security defense mechanisms to become more accurate. Adopting an AI-based email security solution to thwart an AI-based phishing attack is the need of the hour! ESNEW-AGE SCAMMERS ARE NOW RELYING ON A SUPER-INTELLIGENT ALLY. ENTER AI, THE LATEST TOOL THAT IS NOW BEING USED TO GENERATE AND CARRY OUT EXTREMELY SOPHISTICATED EMAIL PHISHING ATTACKS
< Page 8 | Page 10 >