In a nutshell: AI-powered phishing and malware campaigns enable massive scaling and evasion of conventional detection methods, overwhelming traditional security measures.
Panda Security documents in a recent analysis how actors use AI systems to automate phishing, malware distribution, and deepfake creation. This enables massive scaling and circumvention of conventional detection methods.
Artificial intelligence is increasingly being used for illegal activities. The security platform Panda Security has analyzed how phishing, malware campaigns, and synthetic content are being redefined through AI automation: attacks can now be conducted on an unprecedented scale and speed, personalized, and adapted to defensive measures.
For CISOs, this development is critical because established detection methods are reaching their limits. AI-generated phishing emails tailored to individual targets and synthetic video evidence for social engineering bypass signatures and pattern-matching. At the same time, the detection cycle lengthens while attackers can generate new variants faster.
The analysis underscores that technical controls alone are insufficient. Organizations must align their detection capabilities toward behavioral analytics, anomaly detection, and AI-based countermeasures. At the same time, threat intelligence is gaining importance in order to identify the tactics of AI-powered campaigns early. NIS2 Directive compliance requires investments here in modern security architectures and incident response processes that address this threat class.
Source: itwelt.at · Published 3 June 2026
Lumi AI News — AI-assisted curation in accordance with Article 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.2.9.