Threat · curated 11 Sep 2026

Threat Actor Generates 1M Personalized Fraud Emails in 3 Days

Coverage timeline

11 Sep 2026darkreading.com

Single-source incident — first reported, latest, and curated coincide.

Why it matters

AI-assisted phishing lets attackers combine mass volume with per-target personalization that previously required manual effort, defeating the traditional tradeoff defenders relied on to spot bulk fraud.

Microsoft researchers tracked an unattributed threat actor who sent more than one million fraudulent emails in just three days, using AI to personalize each message with real executive names and target accounts payable departments. The campaign impersonated ServiceNow invoices worth just under $50,000, with credible line items and authentic branding to boost believability.