Are We On The Edge Of An AI Cybercrime Armageddon? Separating Hype From Reality

Are we standing at the edge of an AI Armageddon? With the rise of Generative AI (GenAI), cybercriminals are seemingly armed with unprecedented tools, flooding the digital world with sophisticated, unblockable threats. This talk aims to dissect the hype and uncover the reality behind the use of GenAI in cybercrime. We will explore the growing use of deepfakes in scams, exemplified by a million dollar fake BEC video conference fraud. From son-in-trouble scams to KYC bypass schemes, deepfakes are becoming a versatile tool for cybercriminals. Moving to phishing attacks, we’ll discuss how GenAI personalizes and automates social engineering, significantly increasing the volume of attacks. We'll also showcase how GenAI can generate basic malware and explore advanced threats like polymorphic/metamorphic malware that dynamically adapts in real time. By clarifying the differences between AI-generated, AI-aided, and AI-powered threats, we reveal that while GenAI facilitates threat distribution, true AI-powered malware is still rare. Concluding, we’ll address the common confusion between automation and AI-powered attacks, emphasizing that while GenAI scales and accelerates attacks, it does not fundamentally create completely new threat patterns. We will also highlight future research areas, such as exploiting zero-day vulnerabilities and supply chain attacks against GenAI. Join us to distinguish between the hype and the real impact of AI in cybercrime, and understand what this means for the future of cybersecurity defense.