GoKawiilMicrosoft finds AI-driven phishing campaign sent 1 million personalized invoices in 3 days
Microsoft researchers uncovered a phishing operation in which an unidentified attacker sent over one million fraudulent emails within three days, each tailored to target accounts payable staff at specific companies. The emails impersonated ServiceNow, demanding nearly $50,000 in fake subscription payments, and included fabricated email threads featuring real executives' names to make the scam appear legitimate.
GoKawiil's interpretation of the reporting above, not reported fact.
This campaign shows how generative AI lets attackers scale highly personalized social engineering that once required manual research, blurring the line between mass phishing and targeted spear-phishing. Finance teams now face convincing forged invoices and executive impersonation at a volume traditional fraud detection wasn't built to handle.
- Attacker sent over 1 million phishing emails in just three days
- Emails impersonated ServiceNow invoices with fake executive email threads
- AI likely enabled personalization at a scale previously impossible for scammers
YubiKey 5 NFC Security Key — When AI-generated phishing emails get this convincing, a hardware security key is one of the few defenses that still holds up — a stolen password alone won't get an attacker into your accounts. The YubiKey 5 NFC works with major services and business logins, and taps to phones over NFC or plugs into USB-A. It's a pocket-sized way to make credential phishing a dead end.
See YubiKey 5 NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: darkreading.com — Nate Nelson, 2026-09-11
Published there as: “Threat Actor Generates 1M Personalized Fraud Emails in 3 Days”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.