Submission + - Phishing is no longer human as AI now drives 86 percent of attacks (nerds.xyz)
BrianFagioli writes: A new report from KnowBe4 suggests phishing has entered a different phase, with 86 percent of attacks now driven by AI. That shift is showing up in how these campaigns look and where they land. It is no longer just email. Attackers are targeting collaboration tools like Microsoft Teams, sending malicious calendar invites, and using multi-channel approaches that feel coordinated and legitimate. The days of spotting a scam by bad grammar alone are fading, as AI helps generate cleaner, more convincing messages that blend into everyday workflows.
There is also a noticeable increase in more advanced techniques, including reverse proxy attacks aimed at capturing Microsoft 365 credentials in real time. Combined with a rise in internal impersonation, these attacks are getting harder to detect even for cautious users. If this trend continues, organizations may need to rely more heavily on automated defenses to keep up. Human awareness still matters, but when attackers are scaling with AI, defending without similar tools could leave companies increasingly outmatched.
There is also a noticeable increase in more advanced techniques, including reverse proxy attacks aimed at capturing Microsoft 365 credentials in real time. Combined with a rise in internal impersonation, these attacks are getting harder to detect even for cautious users. If this trend continues, organizations may need to rely more heavily on automated defenses to keep up. Human awareness still matters, but when attackers are scaling with AI, defending without similar tools could leave companies increasingly outmatched.