Threat · curated 11 Sep 2026
Threat Actor Generates 1M Personalized Fraud Emails in 3 Days
First reported darkreading.com
Coverage timeline
Single-source incident — first reported, latest, and curated coincide.
Why it matters
AI-assisted phishing lets attackers combine mass volume with per-target personalization that previously required manual effort, defeating the traditional tradeoff defenders relied on to spot bulk fraud.
Microsoft researchers tracked an unattributed threat actor who sent more than one million fraudulent emails in just three days, using AI to personalize each message with real executive names and target accounts payable departments. The campaign impersonated ServiceNow invoices worth just under $50,000, with credible line items and authentic branding to boost believability.