A recent study conducted by researchers at the University of Texas in Arlington, published on "Digital Trends", has revealed that artificial intelligence (AI) models can now exploit publicly shared posts and images on social media platforms to create highly accurate and difficult-to-detect phishing messages. These messages are tailored to individual users, making them more convincing and challenging to identify.
The study found that traditional suspicious messages containing grammatical errors or fake prize offers have become easy to ignore. However, the new AI-generated messages use detailed and real information from users' daily lives, such as travel photos, concert tickets, and service complaints, to create convincing phishing emails. This information can be extracted from text and visual data embedded in images.
The AI technology can automate the process of generating phishing messages, allowing scammers to target thousands of people quickly and efficiently without manual effort. The researchers tested various security systems designed to detect malicious requests, but they found that the default settings failed to recognize customized phishing requests, with detection rates ranging from 0% to 19%.
However, when the security tools were provided with more precise instructions, their detection efficiency increased to 99%. The study's findings will be presented at a specialized cybersecurity conference in March 2027. The researchers emphasize that the presence of accurate personal data in a message is no longer a guarantee of its authenticity.
In fact, it may indicate that the data was collected from open accounts, requiring users to be more cautious and verify the sender's identity and attached links before interacting with them. The study highlights the growing threat of AI-generated phishing messages and the need for enhanced cybersecurity measures to protect users.
The researchers used Instagram posts as a primary source of data for their study, but the findings can be applied to other social media platforms as well. The study's results underscore the importance of user awareness and education in preventing phishing attacks.
As AI technology continues to evolve, it is essential for cybersecurity systems to keep pace and develop more effective detection methods to combat these types of threats. The study's authors stress that a collaborative effort is needed to address the issue of AI-generated phishing messages and protect users from these types of attacks.
Key points
- AI models can create highly accurate phishing messages using public social media posts
- Traditional security systems struggle to detect customized phishing requests
- Enhanced cybersecurity measures are needed to protect users from AI-generated phishing messages
