Spear Phishing in Social Engineering: Leveraging ChatGPT and Numberbook

Abstract

This study explores the rising threat of spear phishing attacks enabled by artificial intelligence (AI) tools like ChatGPT, combined with public data platforms such as Numberbook. By leveraging these technologies, attackers can create highly personalized and convincing phishing messages, drastically improving their success rates compared to traditional methods. This research investigates how AI-generated content enhances the effectiveness of phishing campaigns and proposes a defense framework to combat these advanced threats. The study adopts a multi-faceted approach to cybersecurity, encompassing AI-driven detection models, regulatory measures to limit data exploitation, and comprehensive user education. Survey results indicate that most respondents recognize the effectiveness of AI detection models in identifying phishing attempts. However, the findings also highlight significant gaps in data protection regulations and user awareness programs, which remain critical vulnerabilities. By presenting empirical evidence and practical solutions, this research contributes to the field of cybersecurity, emphasizing the need for advanced detection technologies, stricter regulatory oversight, and enhanced public awareness. The insights offered are pivotal for organizations aiming to fortify defenses against increasingly sophisticated phishing attacks, ensuring a proactive and resilient approach to emerging cyber threats.