How Are Hackers Using AI to Break Into Small Businesses And What Can Be Done About It?
Small businesses are increasingly targeted by cyberattacks, with new tactics being employed by attackers. These adversaries are now utilizing advanced AI systems to automate and enhance their attacks, posing significant threats to small firms.
Small businesses are increasingly targeted by cyberattacks, with new tactics being employed by attackers. These adversaries are now utilizing advanced AI systems to automate and enhance their attacks, posing significant threats to small firms.
A substantial percentage of phishing emails analyzed between September 2024 and February 2025 have displayed AI usage. Additionally, a majority of organizations acknowledge their inability to keep pace with AI-powered attacks. Small businesses, often lacking robust IT infrastructure, are particularly vulnerable.
AI-Generated Phishing: AI is now capable of creating highly personalized phishing emails using public data and previous breaches. Mitigation strategies include implementing DMARC, SPF, and DKIM, fostering a culture of verification, and deploying AI-powered email filters. Deepfake and Impersonation: Deepfake technology is being used to clone voices and impersonate executives. To combat this, organizations should implement verification protocols and multi-person approval processes. AI-Enhanced Password Cracking: AI tools can rapidly generate password variants, making common passwords vulnerable. Multi-factor authentication and password managers are essential defenses. Shape-Shifting Malware: AI can create polymorphic malware that traditional antivirus solutions struggle to detect. Behavior-based endpoint protection is crucial. Automated Reconnaissance: AI conducts extensive reconnaissance to map out organizational vulnerabilities. Limiting public information and conducting regular security audits can help mitigate these risks.
Small businesses are increasingly targeted by cyberattacks, with new tactics being employed by attackers.
To address these evolving threats, small businesses are advised to invest in employee training, as human error remains a significant factor in successful breaches. Utilizing accessible security tools, such as multi-factor authentication and AI-powered email filters, can also reduce exposure to attacks.
Based on reporting by techround.co.uk.
