Microsoft Helps Take Down Massive Automated, AI-Powered Phishing-as-a-Service Platform

Microsoft’s security blog describes the fight against a new “AI-powered cybercrime platform” offering phishing-as-a-service, with AI-tailored lures and analyses of compromised inboxes (to identify high-value targets). The site compromised more than 12,000 inboxes in over 10,000 organizations around the world, compromising business accounts “at scale” with automated attacks and prebuilt phishing templates. AI tools could even sift through a victim’s mailbox to help engineer better phishing messages.