Threat
Threat Actor Generates 1M Personalized Fraud Emails in 3 Days
Publication date not yet evaluated · Added darkreading.com
Page published
Coverage timeline
Single-source incident — one report is available.
Why it matters
AI-assisted phishing lets attackers combine mass volume with per-target personalization that previously required manual effort, defeating the traditional tradeoff defenders relied on to spot bulk fraud.
Microsoft researchers tracked an unattributed threat actor who sent more than one million fraudulent emails in just three days, using AI to personalize each message with real executive names and target accounts payable departments. The campaign impersonated ServiceNow invoices worth just under $50,000, with credible line items and authentic branding to boost believability.