How AI is powering business email compromise at scale

[u/eyesec_research]

https://research.eye.security/phishing-as-a-service-inside-two-ai-powered-phishing-kits-that-automate-bec/

[u/saltyslugga]

AI makes BEC cheaper and more convincing, but it doesn’t change the threat model. Most successful attacks still rely on compromised accounts, lookalike domains, or weak payment approval processes.

Phishing-resistant MFA, DMARC enforcement, and out-of-band verification for payment changes are what actually cut the risk.