Microsoft’s AI Can Be Turned Into an Automated Phishing Machine

Researcher Michael Bargury demonstrated at Black Hat how Microsoft Copilot integrations can be abused—using a PoC tool called LOLCopilot—to automatically generate personalized spear-phishing emails, mimic writing style, reference internal files, and exfiltrate private data when an attacker has access to a user’s work email, illustrating risks of connecting LLMs to corporate data.