--- title: Defending against AI-fueled social engineering | daily.dev description: AI is lowering the cost and skill barriers for social engineering attacks, enabling spear phishing at scale, smishing, and convincing deepfakes used to... canonical: https://daily.dev/posts/defending-against-ai-fueled-social-engineering-1gm1hdqda twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Defending against AI-fueled social engineering | daily.dev og:description: AI is lowering the cost and skill barriers for social engineering attacks, enabling spear phishing at scale, smishing, and convincing deepfakes used to... og:url: https://daily.dev/posts/defending-against-ai-fueled-social-engineering-1gm1hdqda og:image: https://api.daily.dev/og/posts/1gM1hDQDa.png og:image:alt: Defending against AI-fueled social engineering og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Defending against AI-fueled social engineering **[elastic](https://daily.dev/sources/elastic)** · 5 min read · 0 upvotes · 0 comments ## Summary AI is lowering the cost and skill barriers for social engineering attacks, enabling spear phishing at scale, smishing, and convincing deepfakes used to impersonate trusted voices during payment verification calls. Legacy signature-based detection cannot keep pace with machine-speed lure generation. The piece argues SOC teams need behavioral analytics over unified telemetry, agentic AI-assisted investigation that correlates alerts into attack narratives, and transparent, auditable AI reasoning to counter identity-based attacks, pointing to a fuller guide for detection priorities. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What percentage of phishing attacks are AI-driven according to recent research? As much as 86% of phishing attacks analyzed were found to be AI-driven, according to KnowBe4 research cited in reporting from April 2026. This reflects how AI tools let attackers automate reconnaissance, personalization, and message generation at scale rather than crafting each phishing attempt manually. _Security teams tracking how attackers weaponize AI can follow emerging detection guidance on daily.dev._ ### Why are people more likely to fall for smishing (SMS phishing) than email phishing? People are up to 40% more likely to fall for social engineering carried out by text or phone than by email, per Verizon's 2026 Data Breach Investigations Report. Text messages lack the authentication infrastructure built into email, leaving fewer built-in signals that would warn a recipient something is suspicious. _Anyone hardening defenses against smishing can keep up with attacker trends via daily.dev._ ### Why can't signature-based email filters keep up with AI-generated phishing campaigns? Signature-based filters and rule-based fraud engines assume attacker patterns change slowly enough for defenders to catch up, but AI lets attackers regenerate lures, domains, and payloads at machine speed, breaking that assumption. Effective defense instead requires behavioral analytics that reason over unified identity, endpoint, email, and cloud telemetry rather than matching known artifacts. _Teams rethinking detection architecture beyond signatures can track approaches like this on daily.dev._ ## Similar posts on daily.dev - [AI-Powered Social Engineering](https://daily.dev/posts/ai-powered-social-engineering-nlsdsmo0u) · habr · 0 upvotes · 0 comments - [How To Combat AI-Enhanced Social Engineering I Arctic Wolf](https://daily.dev/posts/how-to-combat-ai-enhanced-social-engineering-i-arctic-wolf-85pykk45j) · Arctic Wolf · 0 upvotes · 0 comments - [Is your perimeter having an identity crisis?](https://daily.dev/posts/is-your-perimeter-having-an-identity-crisis--lapr62bfs) · CSO Online · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#phishing](https://daily.dev/tags/phishing), [#elk](https://daily.dev/tags/elk) [View this post on daily.dev](https://daily.dev/posts/defending-against-ai-fueled-social-engineering-1gm1hdqda) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Defending against AI-fueled social engineering","url":"https://daily.dev/posts/defending-against-ai-fueled-social-engineering-1gm1hdqda","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/defending-against-ai-fueled-social-engineering-1gm1hdqda"},"datePublished":"2026-09-01T15:52:06.101Z","dateModified":"2026-09-01T15:52:32.916Z","description":"AI is lowering the cost and skill barriers for social engineering attacks, enabling spear phishing at scale, smishing, and convincing deepfakes used to...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/3828b11f57de792c4751b9cd029942ab?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/3828b11f57de792c4751b9cd029942ab?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"elastic","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"elastic","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/b9f4b44c864c42f68aa7f164715da8b4","url":"https://daily.dev/sources/elastic"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/defending-against-ai-fueled-social-engineering-1gm1hdqda","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,phishing,elk","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"elastic","item":"https://daily.dev/sources/elastic"},{"@type":"ListItem","position":3,"name":"Defending against AI-fueled social engineering"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/defending-against-ai-fueled-social-engineering-1gm1hdqda#faq","mainEntity":[{"@type":"Question","name":"What percentage of phishing attacks are AI-driven according to recent research?","acceptedAnswer":{"@type":"Answer","text":"As much as 86% of phishing attacks analyzed were found to be AI-driven, according to KnowBe4 research cited in reporting from April 2026. This reflects how AI tools let attackers automate reconnaissance, personalization, and message generation at scale rather than crafting each phishing attempt manually. Security teams tracking how attackers weaponize AI can follow emerging detection guidance on daily.dev."}},{"@type":"Question","name":"Why are people more likely to fall for smishing (SMS phishing) than email phishing?","acceptedAnswer":{"@type":"Answer","text":"People are up to 40% more likely to fall for social engineering carried out by text or phone than by email, per Verizon's 2026 Data Breach Investigations Report. Text messages lack the authentication infrastructure built into email, leaving fewer built-in signals that would warn a recipient something is suspicious. Anyone hardening defenses against smishing can keep up with attacker trends via daily.dev."}},{"@type":"Question","name":"Why can't signature-based email filters keep up with AI-generated phishing campaigns?","acceptedAnswer":{"@type":"Answer","text":"Signature-based filters and rule-based fraud engines assume attacker patterns change slowly enough for defenders to catch up, but AI lets attackers regenerate lures, domains, and payloads at machine speed, breaking that assumption. Effective defense instead requires behavioral analytics that reason over unified identity, endpoint, email, and cloud telemetry rather than matching known artifacts. Teams rethinking detection architecture beyond signatures can track approaches like this on daily.dev."}}]} ```