Fortinet: Think Before You Click — Phishing in the AI Era

AI has turned phishing from clumsy spam into highly convincing, personalized attacks that bypass traditional filters and human intuition.

Phishing remains the number one entry point for cyberattacks, and in the AI era it has become dramatically more effective. Attackers now use generative AI to craft flawless emails, clone voices, mimic writing styles and generate deepfake video on demand. For CISOs, SOC teams and every end user, the question is no longer whether a phishing attempt will land in the inbox, but how quickly it will be recognized and neutralized. Fortinet's latest guidance explains why awareness, layered security controls and AI-powered defenses must evolve together.

What was announced

Fortinet published a new industry analysis on how AI is transforming phishing campaigns and what organizations should do to stay ahead. The article underlines that modern phishing is no longer limited to poorly written emails. Attackers now combine large language models, voice cloning and deepfake tools to build highly targeted social engineering campaigns across email, SMS, collaboration platforms and voice channels.

Key points highlighted by Fortinet include the rise of AI-generated phishing, business email compromise (BEC) powered by LLMs, vishing with cloned executive voices, and QR-code based attacks (quishing) that bypass URL filters. Fortinet also reinforces that training alone is insufficient and must be combined with technical controls across email, endpoint and network layers.

Why this matters

For CIOs, CISOs, IT directors and procurement leaders, AI-powered phishing changes the risk calculus. Traditional indicators such as grammar mistakes, awkward phrasing or generic greetings are disappearing. Attackers can now scrape public data, reference real projects and generate messages indistinguishable from legitimate internal communication.

This translates into higher success rates for credential theft, ransomware delivery and financial fraud. Organizations relying only on legacy secure email gateways and periodic awareness training face a growing gap. A modern defense requires integrated AI-driven detection, continuous user education and strong identity controls such as phishing-resistant MFA.

Technical details

• AI-generated emails: flawless grammar, contextual references, personalized tone at scale.
• Voice and video deepfakes: vishing and video calls impersonating executives for wire fraud and credential requests.
• Quishing: malicious QR codes embedded in emails or documents to bypass URL inspection.
• BEC 2.0: LLM-driven conversations maintaining long email threads with victims.
• Recommended controls: AI-powered email security, DNS filtering, EDR/XDR, phishing-resistant MFA, Zero Trust Network Access.
• Human layer: continuous simulations, role-based awareness training and clear reporting workflows.

In the AI era, every click is a decision — and every decision must be supported by both informed users and intelligent security controls

Softprom and Fortinet

Softprom is the official distributor of Fortinet. We help enterprises and service providers design, deploy and operate the full Fortinet Security Fabric — including FortiMail, FortiGate, FortiEDR, FortiSASE and FortiGuard AI-powered services — to counter modern AI-driven phishing and social engineering attacks.

This content was prepared as part of the Softprom DistriFlow project — an automated system for monitoring and adapting vendor news. Original source: original article.