AI phishing scams turn your social posts against you

Researchers at the University of Texas at Arlington found that widely available AI tools can analyse public social media posts and use personal details to create convincing phishing emails. The findings matter because scammers can make messages seem relevant to a person’s real plans and experiences, while producing them at a scale that previously took more effort.

The team studied 200 public Instagram accounts and found that as few as 10 posts could provide enough information for targeted messages. Researchers assessed more than 18,000 AI-generated emails against thousands of real-world phishing messages, using details such as travel, upcoming events and personal concerns. A tailored email might imitate a hotel or venue and direct someone to a fake site designed to steal login or payment details.