CrowdStrike Security Report: Generative AI Powers Social Engineering Attacks
Briefly

In 2024, phishing attacks decreased while threat actors shifted to social engineering tactics like vishing and help desk scams. CrowdStrike's 2025 Global Threat Report highlights the emergence of complex cybercriminal ecosystems using technology such as malware-as-a-service. Generative AI plays a pivotal role, enabling attackers to create fake identities, deepfake content, and execute various forms of fraud. Notably, China's state-sponsored cyber activities escalated dramatically, focusing on high-value industries, while North Korean actors engaged in high-profile scams, showcasing the evolving landscape of cyber threats.
CrowdStrike found that 79% of attacks do not require malware, as attackers use social engineering techniques to exploit legitimate identities and systems.
China saw a 150% increase in cyber espionage activities in 2024, targeting high-stakes sectors like financial services and manufacturing, indicating a rising threat level.
Read at TechRepublic
[
|
]