Microsoft stopped a phishing attack that used AI-generated code to hide its malicious payload and trick victims. Hackers sent fake file-sharing emails from a compromised account, with an SVG file disguised as a PDF that contained hidden JavaScript. Microsoft’s Security Copilot flagged the code as AI-made because it was overly complex and unnatural, while Defender for Office 365 blocked the campaign by spotting suspicious behavior and infrastructure signals. Researchers noted that while AI makes attacks look more convincing, it also creates telltale signs that defenders can detect. The case shows how both attackers and defenders are using AI, making it crucial to prepare for more AI-driven threats. This and more on the Tech Field Day News Rundown with Tom Hollingsworth and Alastair Cooke.
Time Stamps:
Follow our hosts Tom Hollingsworth, Alastair Cooke, and Stephen Foskett.
Follow Tech Field Day on LinkedIn, on X/Twitter, on Bluesky, and on Mastodon.