Security Magazine logo
search
cart
facebook twitter linkedin youtube
  • Sign In
  • Create Account
  • Sign Out
  • My Account
Security Magazine logo
  • NEWS
    • Security Newswire
    • Technologies & Solutions
  • MANAGEMENT
    • Leadership Management
    • Enterprise Services
    • Security Education & Training
    • Logical Security
    • Security & Business Resilience
    • Profiles in Excellence
  • PHYSICAL
    • Access Management
    • Fire & Life Safety
    • Identity Management
    • Physical Security
    • Video Surveillance
    • Case Studies (Physical)
  • CYBER
    • Cybersecurity News
    • More
  • BLOG
  • COLUMNS
    • Cyber Tactics
    • Leadership & Management
    • Security Talk
    • Career Intelligence
    • Leader to Leader
    • Cybersecurity Education & Training
  • EXCLUSIVES
    • Annual Guarding Report
    • Most Influential People in Security
    • The Security Benchmark Report
    • The Security Leadership Issue
    • Top Guard and Security Officer Companies
    • Top Cybersecurity Leaders
    • Women in Security
  • SECTORS
    • Arenas / Stadiums / Leagues / Entertainment
    • Banking/Finance/Insurance
    • Construction, Real Estate, Property Management
    • Education: K-12
    • Education: University
    • Government: Federal, State and Local
    • Hospitality & Casinos
    • Hospitals & Medical Centers
    • Infrastructure:Electric,Gas & Water
    • Ports: Sea, Land, & Air
    • Retail/Restaurants/Convenience
    • Transportation/Logistics/Supply Chain/Distribution/ Warehousing
  • EVENTS
    • Industry Events
    • Webinars
    • Solutions by Sector
    • Security 500 Conference
  • MEDIA
    • Videos
      • Cybersecurity & Geopolitical Discussion
      • Ask Me Anything (AMA) Series
    • Podcasts
    • Polls
    • Photo Galleries
  • MORE
    • Call for Entries
    • Classifieds & Job Listings
    • Continuing Education
    • Newsletter
    • Sponsor Insights
    • Store
    • White Papers
  • EMAG
    • eMagazine
    • This Month's Content
    • Advertise
  • SIGN UP!
CybersecurityTechnologies & SolutionsSecurity Leadership and ManagementSecurity & Business Resilience

Be wary of the latest AI-based email cybersecurity trends

By Rom Hendler
Finger touching email icon

Image via Pixabay

March 2, 2023

In the first half of 2022, businesses around the globe endured 2.8 billion malware incidents and 235 million ransomware threats, with six million phishing attacks predicted by the year’s end. The most vulnerable point of entry — and a favorite phishing hole where hacks most often succeed — is the digital super-highway of inbound and outbound email.

Technological advancements in artificial intelligence (AI)-powered phishing expeditions and machine learning (ML) advancements have enabled hackers to develop far more efficient and less detectable attacks. These seemingly authentic emails appear to be from a safe origination, are increasingly more sophisticated and scam higher numbers of unsuspecting victims all the time.

Additionally, a multitude of employees, sub-contractors and students now connect to professional networks from remote personal locations, which makes the digital line between business and personal connectivity blurry. As business advisor Bernard Marr recently stated in Forbes, "Threats are just as likely to emerge due to improperly secured networks leaving sensitive data accidentally exposed, or unwary or indiscreet employees using non-secured devices while working from home.” This applies quite often to the use of email systems, which is still one of the most frequently used applications during the average person’s work and personal day. According to a recent report published by Safety Detectives, email is responsible for 92% of malware security incidents and 90% of all cyberattacks. Similarly, they estimate that 38% of malware currently arrives disguised as a Microsoft Word file.

These threats make it essential to establish protection for both business and home workplace activities. This extends to family behavior as well, since home workers often share their networks with other family members. Software with AI and ML defenses will better protect overall enterprise assets from these cyber threat escalations, which target email data and feed on human fallibility. Here are some of the latest threats we’ve been hearing about in the ever-evolving market, which are expected to gain greater momentum:

Geophishing: AI and ML have allowed malicious parties to evolve phishing capabilities, empowering them to accurately pinpoint the location of a targeted user. Hackers have taken to integrating realistic details that match a user’s hometown or the location of their bank, healthcare provider or other business partner. These emails are often nearly indistinguishable from an authentic message. Email security software must therefore incorporate AI intelligence to similarly combat these tactics. Sophisticated solutions fight back by scanning email content, links and attachments with tools such as optical character recognition to calculate authenticity with a high rate of success. AI- and ML-powered methods are far more effective than traditional security email gateway (SEG) solutions, which instead rely on blacklisting of already-established malicious IP addresses as opposed to interpreting text to determine the ill intentions of the message. Blacklisting does little to discern an imposter email.

Smishing & vishing: AI and ML schemes troll mobile devices via text/SMS, voice messages and social media, conducting brand-imposter attacks disguised as courtesy alerts or helpful information. Most of these drive victims to a fake website via links or attachments. These scams incorporate overdue payment alerts, banking overdraft warnings, packages needing e-signatures, fraudulent vaccine updates and purchase cart reminders. Spoof voicemails often impersonate government offices such as the Social Security Administration or the Internal Revenue Service. Once victims are driven to an online destination, the fraudulent link infects their data system and commandeers the user’s information. Business- and home-based email systems are frequently infiltrated in this manner.

Remote desktop protocol (RDP) exploitation: More than ever, hackers are targeting remote connectivity to a business or educational network utilizing RDP, or remote desktop protocols, just as a student, consultant or contractor would connect to a third-party network.  According to a 2021 FBI Internet Crime Report, phishing emails, RDP exploitation and exploitation of software vulnerabilities ranked as the top-three infection vectors reported for ransomware attacks.

The Internet of Medical Things (IoMT): IoMT refers to a collection of internet-connected medical devices, hardware infrastructure and software that connect to and comprise a healthcare IT environment via edge computing. Mobile computing devices, laptop carts, electronic equipment for specialized environments like the ER or OR — all of these devices require wireless access to a larger infrastructure. IoMT presents an array of opportunities for hackers to breach the system, providing multiple points of entrance to vulnerable areas of the networks that must all be secured.

Elder financial exploitation (EFE): Phishing scams that identify and target older individuals have skyrocketed since the onset of the pandemic. An AARP report on elder fraud noted that COVID-19-related scams cost seniors $100 million in 2020, with a whopping $547 million attributed to relationship and romance scams in 2021. These attacks can be email, voice and social media generated and all typically involve some kind of digital currency exchange.

Security software that relies on blacklisting and whitelisting of IP addresses are clearly not sufficient to combat the great variety of AI- and ML-based threats, which are now so convincing, cunningly targeted and ubiquitous that even savvy computer users fall victim along with more vulnerable populations. To protect users from these attacks, businesses must not just educate their employees, but arm themselves with technologies that are as evolved and capable as the nefarious hackers, leveraging the same kinds of AI- and ML-driven tools to foil these attempts, taking the burden out of employees’ hands.

KEYWORDS: artificial intelligence (AI) email security hackers IoT machine learning phishing attack remote access

Share This Story

Looking for a reprint of this article?
From high-res PDFs to custom plaques, order your copy today!

Rom Hendler is the CEO and Co-Founder at Trustifi.

Recommended Content

JOIN TODAY
To unlock your recommendations.

Already have an account? Sign In

  • Security's Top Cybersecurity Leaders 2024

    Security's Top Cybersecurity Leaders 2024

    Security magazine's Top Cybersecurity Leaders 2024 award...
    Top Cybersecurity Leaders
    By: Security Staff
  • cyber brain

    The intersection of cybersecurity and artificial intelligence

    Artificial intelligence (AI) is a valuable cybersecurity...
    Logical Security
    By: Pam Nigro
  • artificial intelligence AI graphic

    Assessing the pros and cons of AI for cybersecurity

    Artificial intelligence (AI) has significant implications...
    Cybersecurity
    By: Charles Denyer
Subscribe For Free!
  • Security eNewsletter & Other eNews Alerts
  • eMagazine Subscriptions
  • Manage My Preferences
  • Online Registration
  • Mobile App
  • Subscription Customer Service

More Videos

Sponsored Content

Sponsored Content is a special paid section where industry companies provide high quality, objective, non-commercial content around topics of interest to the Security audience. All Sponsored Content is supplied by the advertising company and any opinions expressed in this article are those of the author and not necessarily reflect the views of Security or its parent company, BNP Media. Interested in participating in our Sponsored Content section? Contact your local rep!

close
  • Crisis Response Team
    Sponsored byEverbridge

    Automate or Fall Behind – Crisis Response at the Speed of Risk

  • Perimeter security
    Sponsored byAMAROK

    Why Property Security is the New Competitive Advantage

  • Duty of Care
    Sponsored byAMAROK

    Integrating Technology and Physical Security to Advance Duty of Care

Popular Stories

Pills spilled

More than 20,000 sensitive medical records exposed

Laptop in darkness

Verizon 2025 Data Breach Investigations Report shows rise in cyberattacks

Computer with binary code hovering nearby

Cyberattacks Targeting US Increased by 136%

White post office truck

Department of Labor Sues USPS Over Texas Whistleblower Termination

Internal computer parts

Critical Software Vulnerabilities Rose 37% in 2024

2025 Security Benchmark banner

Events

September 29, 2025

Global Security Exchange (GSX)

 

November 17, 2025

SECURITY 500 Conference

This event is designed to provide security executives, government officials and leaders of industry with vital information on how to elevate their programs while allowing attendees to share their strategies and solutions with other security industry executives.

View All Submit An Event

Products

Security Culture: A How-to Guide for Improving Security Culture and Dealing with People Risk in Your Organisation

Security Culture: A How-to Guide for Improving Security Culture and Dealing with People Risk in Your Organisation

See More Products

Related Articles

  • SEC0919-Mobile-Feat-slide1_900px

    Can the Tsunami of Phone-Based Social Engineering be Contained?

    See More
  • technology-network-cyber-freepik.jpg

    Five trends complicating industrial automation cybersecurity and how a standards-based approach is the solution

    See More
  • SEC_Web_5Minutes-Breen.jpg

    The impact of ChatGPT and AI on the cybersecurity field

    See More

Events

View AllSubmit An Event
  • November 14, 2024

    Best Practices for Integrating AI Responsibly

    ON DEMAND: Discover how artificial intelligence is reshaping the business landscape. AI holds immense potential to revolutionize industries, but with it comes complex questions about its risks and rewards.
View AllSubmit An Event
×

Sign-up to receive top management & result-driven techniques in the industry.

Join over 20,000+ industry leaders who receive our premium content.

SIGN UP TODAY!
  • RESOURCES
    • Advertise
    • Contact Us
    • Store
    • Want More
  • SIGN UP TODAY
    • Create Account
    • eMagazine
    • eNewsletter
    • Customer Service
    • Manage Preferences
  • SERVICES
    • Marketing Services
    • Reprints
    • Market Research
    • List Rental
    • Survey/Respondent Access
  • STAY CONNECTED
    • LinkedIn
    • Facebook
    • YouTube
    • X (Twitter)
  • PRIVACY
    • PRIVACY POLICY
    • TERMS & CONDITIONS
    • DO NOT SELL MY PERSONAL INFORMATION
    • PRIVACY REQUEST
    • ACCESSIBILITY

Copyright ©2025. All Rights Reserved BNP Media.

Design, CMS, Hosting & Web Development :: ePublishing