Quick answer: AI-driven cyberattacks have jumped roughly 72% year-over-year, and the two fastest-growing weapons in that surge are deepfakes (fake voices, faces, and video used to impersonate real people) and AI-generated malware (malicious code that rewrites itself to dodge antivirus tools). Together they’ve already caused breaches costing millions – including a single video call that tricked a finance worker into wiring $25.6 million to scammers.
If that sounds like science fiction, it isn’t. It’s Tuesday for a lot of security teams right now.
What Are AI-Driven Cyberattacks?
An AI-driven cyberattack is any attack where artificial intelligence does part of the actual work – writing the phishing email, generating the fake voice, rewriting the malware code, or scanning your network for weak points – instead of a human doing it by hand.
That distinction matters more than it sounds. Old-school phishing emails had typos and weird phrasing because a non-native speaker typed them out manually. AI closes that gap instantly. It also means one attacker with a laptop can now run campaigns that used to require an entire team.
Threat intelligence firm AllAboutAI puts a number on it: AI-powered attacks are up 72% year-over-year, automated scanning has hit 36,000 probes per second, and 87% of organizations now report at least one AI-related incident. IBM’s Cost of a Data Breach Report adds the financial sting – AI-involved breaches now average around $6 million, about a million dollars more than a typical breach.
The FBI, Microsoft, and Google Mandiant have all flagged the same shift in their 2026 threat reports: AI isn’t a side character in cybercrime anymore. It’s running the show.
Why Is This Happening Right Now?
Three things lined up at once.
Generative AI got cheap and good: Voice cloning that once needed hours of recorded audio now works from a few seconds of someone’s voice pulled off a YouTube video or an earnings call.
Criminal tooling caught up: Dark-web kits like WormGPT and FraudGPT strip out the safety guardrails from mainstream AI models and sell “uncensored” versions built specifically for phishing and malware. One security writeup found a full AI-powered malware kit built for around $1,600 that still managed to slip past Microsoft Defender.
Detection hasn’t caught up: Most enterprise security tools were built to spot known malware signatures and obviously fake emails. AI-generated attacks don’t repeat themselves, so signature-based defenses miss them.
Deepfake Attacks, Explained
A deepfake is AI-generated audio, video, or images built to make someone appear to say or do something they never did. In cybercrime, deepfakes exist for one purpose: making a scam believable enough that a real person stops questioning it.
How deepfake fraud actually plays out
The pattern shows up again and again in incident reports:
- Voice cloning for wire fraud: Someone impersonating a CEO or CFO calls or leaves a voicemail authorizing an urgent payment. In 2019, a UK energy firm lost $243,000 this way – one of the first documented cases.
- Live video impersonation: In 2024, a finance employee at engineering firm Arup joined a video call with people he believed were his CFO and colleagues. Every single participant was an AI-generated deepfake. He authorized 15 transfers totaling $25.6 million before anyone realized what happened.
- Synthetic identity documents: Fraudsters generate fake ID photos and videos to pass “liveness checks” during account signup, particularly at banks and fintech apps.
The numbers behind the trend
According to Entrust’s 2025 Identity Fraud Report, deepfakes now account for 40% of all biometric fraud attempts. Signicat’s fraud analysis found deepfake attempts grew over 2,000% in three years. Fortinet reported deepfake fraud in the US alone jumped 700% year-over-year in early 2025. And per IBM’s newest breach data, deepfake impersonation is now the single leading AI attack method, involved in 47% of AI-related breaches.
The uncomfortable part: human beings are bad at catching this in real time. Research cited by deepfake-detection vendors puts human detection accuracy for high-quality fake video at around 24.5% – worse than a coin flip.
AI Malware, Explained
AI malware is malicious software that uses AI models – sometimes an actual language model embedded in the code, sometimes AI used during development – to change its own behavior and dodge detection.
The scariest version of this is polymorphic malware. Traditional malware has a fixed signature, a fingerprint that antivirus software can recognize once it’s been seen. Polymorphic AI malware rewrites its own code on the fly, sometimes generating a fresh variant for every single machine it infects. Google Mandiant researchers have already found this technique in Russian state-linked attacks against Ukraine, where the malware pulls live code from an AI model’s API during execution instead of shipping a static payload.
Beyond polymorphic code, AI shows up across the entire malware lifecycle:
| Stage | What AI does |
| Reconnaissance | Scans networks and summarizes org charts to find weak points automatically |
| Development | Writes and debugs malicious code, cutting weeks of work to hours |
| Delivery | Generates personalized phishing lures based on scraped social data |
| Evasion | Rewrites code signatures to slip past antivirus and EDR tools |
| Post-compromise | Adapts to the specific victim’s environment, sometimes even automating ransom negotiation |
IBM’s data shows AI-enabled malware behind 18% of AI-related breaches – the second-biggest category after deepfakes. And it’s not just nation-states. sqmagazine’s 2025 breach analysis found 41% of active ransomware families now include some adaptive AI component, and AI-crafted malware variants had an 18% higher success rate getting past endpoint detection than traditional malware.
Real Incidents That Actually Happened
| Incident | Method | Loss |
| Hong Kong engineering firm (Arup), 2024 | Live deepfake video call impersonating CFO and colleagues | $25.6 million |
| UK energy firm, 2019 | AI-cloned CEO voice, phone call | $243,000 |
| US financial company, 2024 | AI-generated CEO fraud email scheme | $2.5 million |
| Ukraine government networks | AI-generated polymorphic malware (Mandiant-attributed) | Ongoing, undisclosed |
These aren’t hypothetical “could happen” scenarios in a vendor’s marketing deck. They’re closed cases with dollar figures attached.
How to Actually Defend Against This
Most advice in this space is generic (“train your employees!”). Here’s what specifically works against AI-native attacks:
- Kill single-channel authorization: Any payment or credential change above a set dollar amount needs a second verification channel that isn’t email or a phone call – a callback to a known number, an in-person confirmation, or a pre-agreed code word.
- Assume video and voice can be faked: Train finance and executive-adjacent staff specifically on deepfake scenarios, not just text phishing. The Arup case succeeded because the employee’s guard dropped once he saw “familiar” faces.
- Move past signature-based antivirus: Behavioral and anomaly-based detection catches polymorphic malware that signature databases miss entirely.
- Watch for AI tool misuse internally: Unauthorized AI browser extensions and unofficial chatbot use are becoming a data-exposure risk of their own, separate from external attacks.
- Patch faster, not just more: AI-assisted vulnerability scanning means attackers find and weaponize new flaws faster than traditional patch cycles account for.
Frequently Asked Questions
What is an AI-driven cyberattack?
An AI-driven cyberattack is a cyberattack where artificial intelligence directly performs part of the attack – generating phishing content, cloning a voice, or rewriting malware code – rather than a human doing that work manually.
Are deepfake cyberattacks common in 2026?
Yes. Deepfakes are now the leading AI-attack method, linked to 47% of AI-related data breaches according to IBM’s most recent Cost of a Data Breach report, and biometric fraud attempts involving deepfakes have reached roughly 40% of all such attempts per Entrust.
Can antivirus software detect AI-generated malware?
Traditional signature-based antivirus often can’t, because AI-generated polymorphic malware rewrites its own code for each infection. Behavioral detection and anomaly-based monitoring catch it more reliably than signature matching.
What is the biggest recorded loss from an AI deepfake attack?
The largest publicly documented case is the 2024 Arup incident, where a finance employee was tricked by a live deepfake video call into authorizing $25.6 million in fraudulent transfers.
How can a company protect itself from AI voice-cloning scams?
Require a second, independent verification channel for any financial request – such as a callback to a pre-verified phone number – before acting on urgent payment instructions received by phone, video, or email, even if the voice or face looks and sounds correct.
The Bottom Line
AI didn’t invent phishing, malware, or fraud. It just removed the friction that used to slow all three down – the time it took to write a convincing email, clone a voice, or hand-craft malicious code. That friction was doing more defensive work than anyone realized. Now that it’s gone, the only things standing between an attacker and a wire transfer are the verification habits your team actually follows, not the ones written in a policy document nobody reads.
