AI-SUPPORTED SPEAR PHISHING FOOLS MORE THAN 50% OF TARGETS

Summary from the TLDR InfoSec newsletter

A group of researchers tested spear-phishing emails that were created by AI agents based on Claude 3.5 Sonnet and GPT-4o which crawled the Internet for information on the targets. The researchers achieved a click-through rate (CTR) of 54% with the AI agents compared to 12% in the control group. Human-crafted spear-phishing emails also achieved a 54% CTR but at 30x the cost of the AI-generated ones, whereas emails crafted with AI and human input achieved a CTR of 56% with 4x the cost.