Threat Actor Generates 1M Personalized Fraud Emails in 3 Days

The article details a Microsoft-tracked, AI-assisted phishing campaign that blasted over one million personalized invoice emails in three days, impersonating ServiceNow and spoofing executive email threads to trick accounts-payable staff into approving ~ $50,000 ACH payments; it highlights attackers’ use of AI for rapid reconnaissance and personalized content, the campaign’s broad U.S. targeting, and recommends layered defenses including proper email authentication, filters, XDR, user training, and AI-powered detection.