Microsoft Warns of New AI-Powered Phishing Campaigns

Microsoft security teams revealed a sharp increase in AI-assisted phishing campaigns targeting enterprise users. According to researchers, attackers are now using generative AI tools to create highly convincing emails, fake login pages, and multilingual scams at unprecedented scale.

The company said recent phishing attacks showed significantly improved grammar, personalization, and contextual awareness compared to older spam campaigns. Some attackers reportedly use AI to imitate executives, generate fake meeting requests, and automate social engineering interactions in real time.

Security researchers also observed cybercriminal groups experimenting with voice-cloning AI to impersonate company executives during phone calls. In several cases, attackers attempted to convince employees to transfer funds or share credentials by simulating urgent business situations.

Microsoft warned that AI dramatically lowers the technical barriers for cybercrime by enabling less sophisticated attackers to produce convincing scams quickly and cheaply. Defenders now face the challenge of detecting phishing content that increasingly resembles legitimate communication.

The company recommended stronger multi-factor authentication, phishing-resistant credentials such as passkeys, and expanded employee awareness training. Analysts believe AI-assisted cybercrime will become one of the defining cybersecurity challenges of the next decade. (microsoft.com)