Proofpoint says generative AI is weakening email behavior detection
Original title: Generative AI Is Erasing Behavioral Tells, Weakening Behavior-Only Detection, Proofpoint Reports
One actor emailed more than 30 agents with unique property pitches that all ended in the same meeting request.
Proofpoint told its Protect 2026 conference that generative AI lets attackers send fluent, unique phishing and business-email-compromise messages, so filters that look for templates, typos, and reused infrastructure are losing signal. In one case, a single actor contacted more than 30 real estate agents about different properties, then asked each to join a video meeting via a clean google.com redirect. Proofpoint also described device-code phishing kits, fabricated invoice threads, and payload-free hostile email campaigns. The FBI's 2025 Internet Crime Report counted more than 22,000 AI-related complaints and 24,768 BEC complaints.
Unconfirmed: Loss figures are complaints reported to the FBI, not confirmed fraud totals.
- FBI IC3 logged nearly $900 million in losses tied to AI-related complaints in 2025.
- BEC complaints in that report totaled about $3.05 billion in reported losses.
- One real-estate thread moved from an inspection enquiry to a meeting invite in 13 minutes.
- A phishing kit used court, signing, identity, and finance pretexts in front of one device-code flow.
Impact: session authorization, payment diversion, or disruptive email floods
- 1.Treat shared objectives across many unique messages, not message appearance alone, as the detection signal.
- Vendors
- Proofpoint
- Organizations
- FBI Internet Crime Complaint Center
From the original article
8 min read at thehackernews.com
Generative AI has changed what a malicious email looks like. Messages that once gave themselves away through clumsy wording, generic pretexts, and reused templates now arrive fluent, personalized, and unique to each recipient, and the behavioral signals email filters have relied on for years are fading as a result. Proofpoint shared several examples of the shift at its Protect 2026 conference.
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.