Integrity360 has warned that artificial intelligence is making conventional cyber attacks dramatically more effective by eliminating the traditional warning signs Irish businesses have relied upon to identify fraudulent communications. Richard Ford, chief technology officer at Integrity360, said cybercriminals now deploy AI to produce convincing emails within seconds, replicate voices accurately and conduct conversations that feel authentic.
The Dublin-based cybersecurity firm highlighted that poorly crafted phishing emails previously sent indiscriminately to thousands of recipients can now become personalised messages referencing specific job titles, employers or colleagues. According to Ford, this transformation marks a fundamental shift in how organisations across Ireland need to approach security awareness and verification processes.
Key facts
- AI allows cybercriminals to create highly targeted attacks using publicly available information about job titles, employers and professional networks
- Voice replication technology undermines traditional verification methods such as phone callbacks to confirm unusual requests
- Synthetic candidates created using AI pose recruitment risks by potentially gaining legitimate credentials and system access
- The cost and effort required to launch convincing attacks continues to fall as AI technology becomes more accessible
Social Engineering Attacks Gain Unprecedented Scale and Quality
Phishing and impersonation tactics represent established threats within the technology security landscape, but artificial intelligence has fundamentally altered the efficiency equation. Historically, creating targeted attacks required substantial research time to understand an organisation, identify appropriate employees and gather sufficient information to construct believable approaches. AI now accelerates this entire process.
Individuals routinely publish extensive information online including job titles, employer details, colleague names, conference attendance, supplier relationships and professional interests. When combined with conversational AI capabilities, criminals possess the necessary components to generate highly personalised approaches at previously impossible scales. The risk no longer centres on technically sophisticated attacks but rather perfectly ordinary requests containing enough accurate context to establish credibility.
These could manifest as apparent colleagues requesting information, suppliers discussing invoices or individuals claiming to be senior executives making urgent demands. As interaction credibility increases, traditional advice to simply identify phishing emails becomes progressively less useful.
Voice Replication and Synthetic Candidates Create New Verification Challenges
Email represents only one component of the evolving threat landscape. AI-generated voices and sophisticated synthetic content create additional challenges for Irish organisations by undermining signals people traditionally use to establish trust. When employees receive unusual emails, standard practice involves calling the sender for verification. However, this safeguard becomes ineffective when voices can be convincingly replicated.
Ford emphasised that identity verification must become significantly more important within organisational processes. Companies require systems allowing employees to independently verify sensitive requests, particularly those involving payments, confidential information or system access. Trust cannot depend solely on whether communications appear genuine or voices sound authentic.
Recruitment processes deserve particular attention, according to the Integrity360 executive. While organisations prepare for cybercriminals attempting network breaches, they may be less prepared for individuals entering through hiring processes. AI enables creation of convincing CVs, interview manipulation and increasingly sophisticated synthetic candidates. Successful candidates eventually receive legitimate credentials, corporate system access and visibility of sensitive information. Instead of exploiting technical vulnerabilities, attackers could persuade organisations to provide access legitimately.
“This is another example of why cyber security can no longer be considered solely an IT responsibility,” Ford stated. “Recruitment teams, HR departments and business leaders all have a role in understanding how identity needs to be verified.”
All Irish Businesses Face Elevated Risk Regardless of Size
A common perception suggests sophisticated cyber attacks primarily threaten large businesses, financial institutions or critical infrastructure. Ford challenged this assumption, noting that attackers focus on reward and opportunity rather than organisational size. Large organisations may offer valuable information or greater financial returns, while smaller businesses may have fewer resources and weaker controls.
As AI technology becomes more accessible, the cost and effort required to create convincing attacks continues falling. Irish organisations cannot rely on being too small, too obscure or operating in the wrong industry to avoid attention. Security awareness remains important, but companies must recognise its limitations as fraudulent communications become increasingly difficult to distinguish from legitimate ones.
Reporting based on original coverage by Irish Tech News.