Sí, la IA puede generar correos electrónicos de phishing creíbles y personalizados para un objetivo. — Estado verificado en mayo de 2024 ?

Una capacidad que deseamos que la IA no tuviera. El lado defensivo —los detectores de phishing con IA— también mejoró dramáticamente en 2024.

Background

Recent public tests show that large language models can tailor phishing emails by extracting names, employers, writing habits and social connections from public posts to produce messages that read as authentic to the recipient. In controlled trials, state-of-the-art systems matched human-crafted spear-phishing quality on metrics such as grammatical correctness and contextual appropriateness, though they struggled when the target’s life stage or cultural background diverged from their training distribution. Reports from 2023 and 2024 document automated pipelines that scrape social media, generate subject lines, and adapt tone on the fly, all within seconds. Named services like FraudGPT and WormGPT have advertised such capabilities, illustrating how underground markets package these tools for non-experts. Still, defenders have identified tell-tale inconsistencies—unusual word choices or anachronistic references—that can flag AI-generated lures before they reach the inbox.

SOURCE: Nature, 2024