AI-Driven Phishing: Techniques, Threats, and Defence Strategies

Phishing attacks are one of the most challenging threats in the cyberspace. Recently, rapid advancements of (generative) AI and its wide applicability has been exploited by attackers to perform phishing attacks. However, limited studies exist regarding AI-based phishing and apt defence strategies. In this work, we explore a wide variety of AI-leveraging techniques, adopted by attackers to conduct successful phishing campaigns. Additionally, we highlight the negative impact of AI-driven phishing in real-world and the attendant challenges that it has on cybersecurity. We also examine various factors and features of AI-powered phishing which makes these difficult to identify and complicated to defend. Consequently, we evaluate the crucial aspects of phishing attacks and discuss its defence strategies, human-centred preventive measures, and ethical considerations for enhancing security against AI-based phishing threats. Our findings provide valuable insights to the evolving cybersecurity threats and effective approaches to defend against these sophisticated AI-driven attacks.

URI

https://bradscholars.brad.ac.uk/handle/10454/20526

Version

Accepted manuscript

Citation

Shrestha L, Balogun H and Khan S (2025) AI-Driven Phishing: Techniques, Threats, and Defence Strategies. In: Cybersecurity and Human Capabilities Through Symbiotic Artificial Intelligence. Proceedings of the 16th International Conference on Global Security, Safety and Sustainability, London, November 2024. In book series: Advanced Sciences and Technologies for Security Applications. Springer. pp. 121-143. ISBN 978-3-031-82030-4.

Link to Version of Record

https://doi.org/10.1007/978-3-031-82031-1_7

Type

Conference_Item

Notes

The full text will be available at the end of the publisher's embargo: 14th May 2026.