Quick Summary
AI is transforming social engineering attacks, making them cheaper and easier to execute. Miguel Fornés from Surfshark highlights how AI agents automate tasks like research and targeting, enabling scammers to conduct phishing campaigns with minimal human involvement. A notable incident involved a finance worker who was deceived into transferring millions to fake executives, underscoring the urgent need for verification procedures and checks in communications.
The Securityish Brief
In a recent discussion, Miguel Fornés, Governance and Compliance Manager at Surfshark, addressed the significant impact of AI on social engineering attacks. He explained that tasks which previously required extensive time and expertise, such as research and targeting, are now automated and cost-effective. This shift has lowered the barriers for scammers, allowing them to execute sophisticated phishing campaigns with relative ease.
Fornés pointed out that AI agents can gather open-source data and engage in live conversations with victims without any human intervention. This capability raises serious concerns about the authenticity of calls and messages, as traditional methods of verification are becoming increasingly unreliable.
One alarming case highlighted involved a finance worker who was tricked into sending millions after interacting with individuals posing as executives. This incident illustrates the potential financial risks associated with AI-driven scams.
Why Verification is Crucial
As human senses alone are no longer sufficient to detect fraud, Fornés emphasizes the importance of implementing verification procedures, checks, and shared methods among organizations. He advocates for the adoption of content provenance standards and safe words to enhance security in communications.
Organizations and individuals alike must adapt to these evolving threats by being vigilant and implementing robust verification processes. The rise of AI in scams signals a need for increased awareness and proactive measures to protect sensitive information and financial assets.
Key Takeaways
- Implement verification procedures for all financial transactions to prevent falling victim to scams.
- Educate employees about the risks of AI-driven social engineering attacks and how to recognize them.
- Use content provenance standards to verify the authenticity of communications.
- Establish shared verification methods, such as safe words, to confirm identities in critical conversations.
- Regularly review and update security protocols to address new threats posed by AI technologies.
Key Terms & Concepts
- AI agents: In this article, AI agents refer to automated systems that gather data and interact with users without human involvement.
- deepfakes: Deepfakes are synthetic media where a person’s likeness is replaced with someone else’s, making it difficult to trust audio and video communications.
- social engineering: Social engineering is a manipulation technique that exploits human psychology to gain confidential information or access.
Read the original article here: https://www.helpnetsecurity.com/2026/02/10/ai-driven-social-engineering-video/
Your 5-Minute Securityish Brief
A weekly digest of cybersecurity news, phishing alerts, privacy tips, and emerging threats, simplified so anyone can understand what matters and why.
Securityish
Securityish explains cybersecurity, scams, data breaches, and privacy risks in simple language so you know what’s happening and how to protect yourself.
© 2026 Securityish
