Social Engineering Attack in the Era of Generative AI

Abstract

A significant cybersecurity risk arises when sophisticated artificial intelligence (AI) is combined with social engineering. The aim of this study was to assess how much the sophistication and skills of social engineering are enhanced through advanced AI techniques. The study found that generative AI has revolutionized social engineering in six key areas: multi-channel attack vectors, automated infrastructure for social engineering campaigns, advanced personalization, the development of evasion and obfuscation tactics, and the creation of hyper-realistic content. The study also proposed a framework to recognize the evolving threat landscape, termed the Generative AI Social Engineering Framework. It highlights how structured and organized AI can be leveraged in deceptive social engineering tactics by integrating elements from machine learning, cybersecurity, and human-computer interaction. Besides showing up the vulnerabilities, the research also lays out recommendations to safeguard organizations and individuals in order to attain digital resilience.