Halloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PCHalloween DealsAmazon USOctober picks are moving - compare before checkoutAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
World desk9 min

How AI Is Changing Phishing and Other Familiar Cyberattacks

AI makes familiar cyberattacks faster, more tailored and harder to recognize across email, text, voice and video. Learn practical verification steps for individuals and organizations.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

AI is making familiar cyberattacks faster, more personalized and more convincing—not replacing the underlying playbook. Attackers still want the same outcomes: a password, an authentication code, access to an account, a malware infection, confidential information or a payment. Generative tools reduce the effort needed to write a credible lure, impersonate a trusted person and run many conversations at once.

That means spelling mistakes, awkward wording and obvious visual glitches are no longer dependable warning signs. The safest response is procedural: pause, inspect the sender and link, and verify an unusual request through a contact route you already know is genuine.

As an Amazon Associate I earn from qualifying purchases.

What AI changes—and what it does not

The FBI’s San Francisco field office says AI tools can produce targeted phishing messages with correct grammar and spelling while increasing the speed, scale and automation of existing schemes. Europol’s IOCTA 2025 summary similarly describes criminals using generative AI, including large language models, to tailor scam messages to a victim’s cultural context and personal details.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

AI therefore acts as an amplifier. It can draft hundreds of plausible messages, adjust tone for different recipients, summarize information about a target and keep a conversation moving. It does not remove the attacker’s need to obtain a delivery channel, stolen credentials, a payment account or a way to monetize access.

#1 Best Overall
Elebase USB to USB C Adapter for iPhone 18 Pro Max,USBC Car Charger Adapter | 4Pack Type C Female to A Male Cable Converter for Apple Duo 17 16 15 14 Plus,iWatch Watch 12 11 10,iPad 9 8 Air,Airpods 5 4
  • Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
  • Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
  • Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
  • Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
  • 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
  • Presentation improves: a lure can sound like a colleague, supplier or family member instead of a mass-mail template.
  • Personalization expands: public posts, job information and previous messages can be used to make a request seem relevant.
  • Operations accelerate: one operator can generate, translate and adapt messages at a scale that previously required a larger team.
  • Impersonation crosses channels: text, email, telephone voice and video can reinforce one another.

Not every phishing email, malware incident or fraud is AI-enabled. The available official statistics are reports of complaints in categories that mention AI, not a census proving that AI caused every incident or that it increased the success rate of all attacks.

How an AI-assisted attack typically unfolds

1. The attacker chooses a familiar pretext

The starting point is usually ordinary social engineering: an urgent invoice, an account warning, a package problem, a job-related request, a family emergency or a demand from an executive. AI helps generate alternatives quickly, but the trust trigger remains familiar.

2. Public and stolen information supplies context

A message can mention a real project, a recent trip, a supplier name or a family relationship. Europol’s 2025 assessment specifically notes tailoring to cultural context and personal details. A personalized sentence is evidence that someone gathered information—not proof that the sender is genuine.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

3. The lure moves the target toward an action

The requested action may be opening a link, signing in, downloading an attachment, buying gift cards, changing bank details, sending a payment or revealing an authentication code. FBI campaign descriptions identify account takeover, credential theft, malware delivery and requests for information or funds as recurring outcomes.

4. Follow-up messages maintain pressure

Generative systems can answer questions, translate replies and keep a target engaged. An attacker may move the conversation from email to text or another messaging platform, where the target feels less able to verify the request with colleagues. A polished exchange can still be a trap.

Impersonation now spans email, text, voice and video

Email and messaging

Correct grammar no longer separates a legitimate message from a fake one. AI can produce a convincing tone, imitate common business phrasing and create several versions for different victims. Text-message scams (smishing) may use a short link and an urgent warning; a later message can appear to come from a manager or service provider.

Rank #2
Sale
Anker USB-C Hub, 5-in-1 USB Hub for Laptops, 4K HDMI Multiport Adapter | USB C Dongle with 90W Max Power Delivery, 3×5Gbps USB A Data Ports, for MacBook, Dell, and More (Charger Not Included)
  • 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
  • 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
  • Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
  • 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
  • What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.

Voice cloning

The FBI describes criminals using cloned voices to imitate family members, co-workers and business partners. In a May 2025 alert, the bureau warned about texts and AI-generated voice messages impersonating senior officials. The messages built rapport and sometimes shifted the target to another platform containing a malicious link.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A familiar voice is now only one signal. A short recording can be generated from publicly available audio, and a scammer can combine a cloned voice with real personal details. Before sending money, credentials or sensitive information, end the call and ring a number already stored in your contacts or published on an official account.

Video and live-looking meetings

Video manipulation can make a request appear to come from a real executive or relative. A video image, caller ID or profile photograph can be copied or altered. Treat the communication channel as untrusted until you verify the request separately, especially when it changes payment instructions or asks for secrecy.

“As technology continues to evolve, so do cybercriminals’ tactics. Attackers are leveraging AI to craft highly convincing voice or video messages and emails to enable fraud schemes against individuals and businesses alike,” said FBI Special Agent in Charge Robert Tripp.

Can you tell whether a phishing message was written by AI?

No single clue can reliably identify AI-generated content. Awkward writing, strange images, an unnatural voice or a perfect-looking message can all occur in legitimate or fraudulent communications. The FBI warns that AI-generated material can be difficult to identify.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Use content clues as prompts to verify, not as a verdict:

Rank #3
Sale
Anker USB C Hub, 7in1 Multi-Port USB Adapter, 4K@60Hz USBC to HDMI Splitter | 85W Max PD, 2 USB 3.0 & 1 USBC Data Ports, SD/TF Card Reader, for Laptops/Mac and Other Type C Devices (Charger Not Included)
  • Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
  • Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
  • Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
  • Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
  • What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
  • Inspect the complete sender address, telephone number and account name. Look for a substituted domain character or an address that does not match the claimed organization.
  • Hover over a link on a computer, or press and hold it on a phone, to reveal the destination before opening it. A familiar display name does not make the URL safe.
  • Check whether the request is unusual for that person: a new bank account, secrecy, urgency, a gift-card purchase or an authentication code.
  • Compare the request with an independent record, such as a prior invoice, a known company directory or a phone number you saved earlier.
  • Do not open an attachment or sign in through a message until the sender has been verified through another route.

Do not reply to the suspicious message to ask whether it is real. A compromised account—or the same attacker—can answer convincingly.

What to do with a suspicious email, text or voice message

  1. Pause. Urgency is a manipulation technique. Do not click, call a number in the message or move to a new chat at the sender’s request.
  2. Record the details. Note the sender address or number, displayed name, link destination and the exact request. Preserve the message if your organization needs it for investigation.
  3. Verify independently. Use a telephone number, website bookmark, company directory or family contact method that existed before the message. For a payment request, speak to the person using that known route.
  4. Refuse to share authentication codes. A legitimate support worker, bank employee or relative should not need a one-time MFA code sent to your device.
  5. Report and remove it. Use your email or messaging service’s report function and follow your employer’s incident process. Deleting the message after reporting reduces the chance of an accidental click.
  6. If you acted already, contain the damage. Change the affected password from a clean device, revoke active sessions where the service permits, contact the bank or payment provider immediately, and tell your organization’s security team.

A family secret phrase

The FBI suggests agreeing on a secret word or phrase with family members. It should not be posted publicly or reused as a password. If a supposed relative calls with an emergency, ask for the phrase and independently call the relative or another trusted person.

How to verify a payment request from a boss, supplier or relative

Payment fraud succeeds when a target treats a familiar voice or polished message as authorization. Use a two-person or two-channel check for any unusual transfer.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Compare the new request with the last approved invoice or bank details; do not rely on a reply in the same email thread.
  2. Call the requester using a known number, not the number in the message or caller ID.
  3. Ask a second authorized person to review the change, particularly a new beneficiary or urgent international transfer.
  4. Confirm the amount, destination, deadline and reason verbally, then document who approved it.
  5. If the requester insists on secrecy or refuses a verification step, stop the transaction.

These controls address the underlying fraud opportunity even when the attacker uses no AI at all.

Does multi-factor authentication stop AI-assisted phishing?

MFA substantially reduces the value of a stolen password, but it does not make phishing harmless. Attackers can direct a victim to a fake sign-in page and then ask for the one-time code, or pressure the victim to approve an unexpected login. Never read an MFA code to a caller or type it into a page reached from an unsolicited message.

Use the strongest MFA method your account supports and enable login alerts. A hardware security key is one possible physical option, but compatibility varies by account and service; confirm that an account supports the key before buying one. MFA cannot prevent a victim from authorizing a fraudulent payment, so payment verification remains necessary.

Rank #4
Sale
UGREEN USB to USB C Adapter Combo 4-Pack, 10Gbps USB C Converter Space Gray | Data transfer & Fast charging for MacBook, iPhone 17/16/15, iPad, Samsung Galaxy, Apple Watch
  • Dual Converters, Infinite Potential:Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
  • Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
  • Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
  • Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
  • Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft

Organizational defenses that match the attack path

Organizations should combine controls rather than search for an AI detector. NIST’s December 2025 AI Cybersecurity Framework Profile initial preliminary draft calls for updated personnel training and integrated automated email and authentication defenses.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Reduce exposure

  • Use email authentication and filtering to reduce spoofed and malicious messages.
  • Block known malicious links and attachments, and quarantine look-alike domains.
  • Require phishing-resistant or hardware-backed MFA where the workflow and service support it.
  • Limit mailbox forwarding, privileged access and payment-change permissions.

Train for scenarios, not grammar tests

Recurring training should include polished writing, smishing, voice cloning, fake video meetings, QR-code links and requests for MFA codes. Employees need a simple reporting path and permission to pause a transaction without being penalized for delay.

Build verification into payments

Use out-of-band confirmation for changes to bank details, dual approval for high-value transfers and a known-contact directory. A security tool can reduce delivery, but only a human or workflow check can determine whether a legitimate-looking request is authorized.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What the reported numbers show

The FBI Internet Crime Complaint Center’s 2025 annual report gives useful scale indicators, with important limits: the figures cover complaints that reported AI-related information and are not a verified estimate of all AI-caused cybercrime.

Measure Reported figure How to interpret it
Complaints reporting AI-related information 22,364 Complaints received by IC3 in 2025; not a count of confirmed AI-enabled attacks.
Adjusted losses in those complaints $893,346,472 Reported adjusted loss; the report’s prose says losses exceeded $893 million.
Business email compromise involving AI More than $30 million Business losses reported to IC3 in that category.
Confidence or romance scams with a likely AI nexus More than $19 million Victim losses in the report’s category and attribution language.
Distress scams More than $5 million Victim losses in the report’s category; not a complete total for AI-related crime.

Complaint totals depend on reporting behavior, category definitions and the information victims provide. They should not be converted into an attack-success rate or used to claim that AI caused every loss.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Emerging technical uses: what is established and what is still an assessment

NIST IR 8596, dated December 2025 and identified as an initial preliminary draft, discusses broader possibilities including realistic malicious websites and links, AI-assisted malware and potential autonomous orchestration of attack phases. Those are evolving risk assessments, not a universal or measured trend across all incidents. NIST also cautions that AI-enabled attacks may go undetected while defenders develop their understanding and countermeasures.

Best Value
Sale
Anker USB C Hub, 5-in-1 USBC to HDMI Splitter with 4K Display | 85W Max PD, 1 Powered USB-C 5Gbps & 2 Powered USB-A 3.0 5Gbps Data Ports, for MacBook Pro, MacBook Air, Dell and More (Black)
  • 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
  • Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
  • Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
  • HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
  • What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.

Separately, NIST AI 100-2 covers threats to AI systems themselves, including evasion, poisoning, privacy attacks and misuse of generative AI. This is related but distinct: an organization can be attacked because it deploys an AI model, while criminals can also use AI to improve an ordinary phishing campaign. The defensive controls and owners may differ.

CISA’s January 2024 document discusses generative AI in the specific context of election-related risks. It is useful context for amplification of existing threats, not a general measurement of cybercrime rates.

A practical decision framework

When choosing a control or procedure, match it to the path the attacker is using:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Attack path Priority control Verification question
Credential theft MFA, password manager and link inspection Am I signing in through a bookmark or a known application?
Account takeover Phishing-resistant MFA, session alerts and recovery protection Did I initiate this login or approve this device?
Payment fraud Known-number callback and dual approval Did the requester confirm the destination through an independent channel?
Malicious links or attachments Filtering, sandboxing and cautious opening Was this file or URL expected and independently verified?

Then check audience and workflow: an individual may need a family phrase and account alerts, while a company needs documented approvals, training and technical filtering. The best control is one people can use consistently and that adds a genuinely separate verification step.

Bottom line

AI changes the quality, speed and reach of familiar attacks. It can make a phishing email sound professional, turn a text into a convincing conversation and make a cloned voice seem personal. The reliable defense is not guessing whether content was machine-generated. Pause, verify through a previously trusted channel, protect authentication codes, and require independent approval before money, credentials or sensitive data move.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.