How attackers use agentic AI for phishing

Agentic AI can run phishing campaigns without a human attacker at the keyboard. An agent researches the target, writes the lure, sends it, reads the reply, and escalates across email, voice, and collaboration tools. Because the agent handles each step, campaigns can move at a pace and volume that many controls weren’t calibrated for.