Skip to content
Auto-CTI
Back to today
NEW HIGH B3

Protecting organizations from AI-assisted executive impersonation and invoice fraud

B Microsoft Security Blog ·

Admiralty grading (A–F · 1–6)

Source reliability

  • A Completely reliable
  • B Usually reliable
  • C Fairly reliable
  • D Not usually reliable
  • E Unreliable
  • F Cannot be judged

Information credibility

  • 1 Confirmed
  • 2 Probably true
  • 3 Possibly true
  • 4 Doubtful
  • 5 Improbable
  • 6 Cannot be judged

NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.

Key insight

Threat actors are leveraging AI-powered techniques to craft highly convincing spoofed emails impersonating internal executives, enabling large-scale campaigns distributing over one million fraudulent messages.

Description

An active campaign leverages AI to enhance phishing templates and craft personalized emails impersonating internal executives. Threat actors employ third-party email delivery infrastructure and combine multiple attack techniques within single messages to strengthen narrative credibility. The campaign targets financial fraud and invoice manipulation, distributed across millions of recipients. Microsoft Defender for Office 365 with proper email authentication configuration and spoof protection provides multi-layered defense.

Risk score

20
cvss base
0.00
kev bonus
0.00
epss bonus
0.00
poc bonus
0.00
raw before weight
0.00
industry weight
1.10
freshness factor
1.00
exploitability factor
1.00
days old
0.00
vendor mismatch penalty
0.00

Path: operational

ESC