What do you get when you combine phishing + AI + worm capabilities? Trouble that moves fast!
The latest social engineering attacks hijack victims email response messages to send trusted phishing to others as a means of rapidly spreading.
We have been expecting such attacker innovation in the social-engineering space for some time. This very effective tactic is just one of many maneuvers that will emerge in the near future to increase phishing efficacy and speed. I won’t give any details, as I don’t want to contribute to attacker innovation, but suffice it to say the protections around people must get better as the ability to target and manipulate them increases.