Artificial intelligence may have enabled more effective audio and video deepfakes for social engineering scams, but has yet to be thoroughly integrated into threat actors' hacking techniques, according to Cybersecurity Dive.
Incorporation of AI in cybercrime has been stifled by computational limitations and the challenges in training and configuring models, a report from Intel 471 showed. Attackers would also rather continue using still effective tactics instead of allocating more time to automate models within their infrastructure and coalescing them with delivery systems while ensuring clandestine operations.
"Although AI is often touted as a game-changer for the social-engineering landscape, in the context of phishing, most threat actors still lean on [phishing-as-a-service] platforms and off-the-shelf kits and use AI primarily for content drafting and localization not for true automation or innovation," said Intel 471 researchers, who also predicted increased deepfake-based impersonation and AI-powered disinformation campaigns.
Incorporation of AI in cybercrime has been stifled by computational limitations and the challenges in training and configuring models, a report from Intel 471 showed. Attackers would also rather continue using still effective tactics instead of allocating more time to automate models within their infrastructure and coalescing them with delivery systems while ensuring clandestine operations.
"Although AI is often touted as a game-changer for the social-engineering landscape, in the context of phishing, most threat actors still lean on [phishing-as-a-service] platforms and off-the-shelf kits and use AI primarily for content drafting and localization not for true automation or innovation," said Intel 471 researchers, who also predicted increased deepfake-based impersonation and AI-powered disinformation campaigns.
