Evolving threats need smarter defenses: Combating AI-enabled social engineering

ARTIFICIAL INTELLIGENCE (AI) is transforming the way organizations operate, driving speed, innovation, and efficiency across industries.

- By Bambi Escalante

But the same technology is also being weaponized by cybercriminals, enabling them to launch faster, stealthier, and more convincing attacks than ever before.

In the Philippines, the consequences are already being felt. According to a recent IDC survey commissioned by Fortinet, nearly 78% of organizations reported encountering Al-powered cyber threats in the past year. Among the most concerning are Al-enhanced social engineering attacks, which exploit trust and human behavior to trick victims into revealing information, transferring funds, or approving fraudulent requests.

WHEN OLD TRICKS GET AN Al UPGRADE

Social engineering is not new. Phishing emails, fraudulent calls, and impersonation schemes have long been used to deceive individuals. What is new is how AI supercharges these tactics.

Attackers can now automate reconnaissance, scanning social media posts, company websites, and leaked credentials to build detailed profiles of their targets. With this data, AI can craft personalized phishing messages that are grammatically correct, contextually relevant, and nearly indistinguishable from legitimate communications. Even security-savvy employees may find it difficult to spot the difference.

The rise of deepfakes adds another dimension. Cloned voices and Al-generated videos are being used to impersonate executives, colleagues, or customer service agents. These synthetic media assets are convincing enough to pressure victims into taking urgent action, whether it’s wiring funds, sharing login credentials, or approving sensitive transactions.