According to Dark Reading, one threat actor used AI to generate one million personalized fraud emails in just three days. The campaign illustrates a shift in malicious email operations: cybercriminals no longer need to choose between sending huge volumes of messages and making each one convincing enough to fool its recipient.
Previously, large-scale spam campaigns tended to rely on generic templates, while credible phishing required time-intensive tailoring. AI compresses that work, allowing attackers to produce individually customized lures at scale. The result is that even broad campaigns can carry the specificity normally associated with targeted spearphishing.
The report highlights the operational advantage AI gives attackers, but it does not include technical details about the model or delivery infrastructure. Even without those specifics, the reported output suggests that email defenses must account for lures that are both numerous and individually tailored.