New Phishing Campaign Uses AI Tools to Evade Detection

Microsoft researchers documented a limited spear-phishing campaign that leveraged AI-generated, highly obfuscated code inside an SVG attachment to evade detection. Attackers used a compromised small-business email account and self-addressed messages with BCC to hide recipients; users who opened the attachment were redirected to webpages designed to steal credentials, highlighting a growing trend of threat actors using AI to craft more convincing and stealthy phishing lures.