How To Combat AI-Enhanced Social Engineering Attacks

### Executive summary: The report describes the rise of AI-enhanced social engineering—phishing and BEC—detailing attacker workflows (AI-driven reconnaissance, personalized content generation, adaptive conversation loops, credential harvesting and infostealer deployment), real-world incidents and impacts, and layered defensive recommendations including AI-assisted detection, phishing-resistant MFA, verification protocols, and user training.