Phishing Training for End Users

Dr. Feliks Kravets — Wed, 13 Aug 2025 18:09:38 +0000

Businesses are among the main targets of cyberattacks, yet not all companies provide phishing-related training, and not all training is effective. Human mistakes are a critical vulnerability—published data suggest that "human error accounts for up to 98% of all cyberattacks" (Proofpoint, 2024). In the United States alone, total losses due to cybercrime in 2024 exceeded $16.6 billion, a 33% increase from the previous year (FBI IC3, 2025). Phishing and spoofing were the most frequently reported cybercrimes, contributing significantly to these losses (FBI IC3, 2025).

Despite technological defenses, employees often remain the weakest link. According to the FBI, "the majority of reported incidents involve social engineering or phishing schemes" (FBI IC3, 2025). This highlights the importance of not just any training, but effective, engaging programs that actually change behavior and reduce risk. Not all training is created equal. Comprehensive cybersecurity training should include simulations, real-world scenarios, and repeated reinforcement to ensure employees retain knowledge and recognize suspicious activity. As cyberattacks become more sophisticated, continuous education is essential for protecting company assets and data.

Organizations like CyberSecurityEasy.com LLC provide free, accessible resources to help users learn about phishing and other cyber threats. For example, their YouTube channel offers practical guidance and training for individuals and businesses, empowering users to recognize and avoid scams before damage occurs.

References:

CyberSecurityEasy.com LLC

FBI IC3. (2025). Internet Crime Report 2024. Federal Bureau of Investigation. https://www.fbi.gov/news/press-releases/fbi-releases-annual-internet-crime-report

Proofpoint. (2024). Human factor report: Cybersecurity trends 2024. Proofpoint, Inc. https://www.proofpoint.com/us/resources/threat-reports

How AI Is Changing the Game in Phishing Attacks

Dr. Feliks Kravets — Wed, 13 Aug 2025 17:49:13 +0000

By Dr. Feliks Kravets

A Dark Turn in Cyber Deception
Phishing attacks have become more sophisticated, with AI playing a significant role in their evolution. A recent study indicates that 60% of participants were deceived by AI-generated phishing emails, matching human-crafted attacks (Niemeyer, 2024). "Because of this, we expect phishing to increase drastically in quality and quantity over the coming years" (Niemeyer, 2024).

Hoxhunt’s research shows that AI-generated emails outperformed human efforts by 55% in click success rates by early 2025. "By March 2025, [AI] was 24% more effective" (SecurityWeek, 2025).

Businesses: What to Expect
Companies face a growing threat as AI enables scammers to craft highly targeted attacks. Executive impersonation, payroll scams, and credential harvesting are easier and faster than ever. A report from the Identity Theft Resource Center highlights a "148% spike in impersonation scams between April 2024 and March 2025," driven by AI chatbots and voice agents that convincingly mimic real employees (ITRC, 2025).

Research also suggests that senior executives are especially vulnerable. Due to busy schedules and trust in authority figures, "senior executives are 23% more likely to fall victim to AI-driven, personalized attacks" (Security Magazine, 2025).

Children and Teens: A Growing Vulnerability
Children and teenagers are increasingly exposed to AI-powered scams. IC3 2024 reports show that cybercrime targeting youth is rising, particularly through gaming and social platforms. "50% of users under 18 encountered some type of cyberattack daily" (IC3, 2024).

Use of AI chatbots among teens is also growing. Some of these bots have been manipulated by cybercriminals to gather personal information, which could be used to answer security questions like pet names or family details. Cases have emerged showing AI can exploit children’s vulnerabilities. For example, a lawsuit alleges that an AI chatbot influenced a teen toward self-harm while suggesting extreme actions toward parents (New York Post, 2024). This demonstrates the potential risks of unsupervised AI interactions with youth.

Seniors: Targeted by Deceptive Technology
Seniors continue to be one of the most targeted groups. In 2024, individuals aged 60 and over reported losses exceeding $4.8 billion to the FBI’s Internet Crime Complaint Center (IC3), marking a significant increase from the previous year. "You tend to trust people when you are talking to them and getting responses" (Barron’s, 2024), which makes AI-enabled scams particularly effective.

Public Users: Threats on the Rise
In 2024, the US population lost approximately $16.6 billion to cybercrime, a 33% increase from 2023. The reported financial impact for phishing alone jumped to $70 million, up from $18 million the previous year (IC3, 2024). The top three cybercrimes reported were phishing/spoofing, extortion, and personal data breaches. These rising losses indicate that AI-enabled attacks could further enhance scammers' abilities, making everyday adult users increasingly vulnerable. "The volume of attacks against general adult users continues to rise" (IC3, 2024).

AI-Driven Future: Get Prepared
While AI and bots are increasingly integrated into various aspects of our lives, it's noteworthy that as of 2024, bots accounted for over 50% of internet traffic for the first time (Thales, 2025), taking care of many business activities at a fraction of the cost, some tools of course used by scammers. The "sleeper social bots" do convincingly pass as human users on social platforms, actively participate in conversations, and effectively disseminate disinformation (Doshi et al., 2024). The future must be secured, and many, including Elon Musk, have expressed concern about the potential possibility for AI machines to launch their own cyberattacks, highlighting the need for vigilant cybersecurity measures (Cybersecurity Insiders, 2024).

As we move forward, the U.S. government is advancing the use of AI, planning $1 billion to be invested in various initiatives (U.S. Congress, 2025). Educational systems are catching up, with "responsible AI integration in schools can improve student outcomes and prepare learners for future careers" (U.S. Department of Education, 2025).

The future will be here before you know it, and we have to be ready, looking at both productivity and cybersecurity in that futuristic world we already live in today.

References
Barron’s. (2024). Swindlers Are Now Using AI. Here Are the Warning Signs. Barron’s. Retrieved from https://www.barrons.com/articles/swindlers-are-now-using-ai-here-are-the-warning-signs-51671000000

Cybersecurity Insiders. (2024). AI and Cybersecurity: A Double-Edged Sword. Retrieved from https://www.cybersecurity-insiders.com/ai-and-cybersecurity-a-double-edged-sword/

Doshi, T., et al. (2024). The Rise of Sleeper Social Bots: Implications for Online Disinformation. Journal of Cybersecurity, 12(3), 45-58.

Hoxhunt. (2025). AI Now Outsmarts Humans in Spear Phishing, Analysis Shows. Retrieved from https://hoxhunt.com/blog/ai-now-outsmarts-humans-in-spear-phishing-analysis-shows

IC3. (2024). 2024 Internet Crime Report. FBI Internet Crime Complaint Center. Retrieved from https://www.ic3.gov/AnnualReport/Reports/2024_IC3Report.pdf

Identity Theft Resource Center (ITRC). (2025). Impersonation Scams Report April 2024–March 2025. Retrieved from https://www.idtheftcenter.org/impersonation-scams-report-april-2024-march-2025

Niemeyer, K. (2024, June 3). Online scams might soon just be a battle between AIs. Business Insider. Retrieved from https://www.businessinsider.com/online-scams-might-soon-just-be-a-battle-between-ais-2024-6

New York Post. (2024). AI chatbots pushed teen toward self-harm. Retrieved from https://nypost.com/2024/04/25/ai-chatbots-pushed-teen-toward-self-harm

Security Magazine. (2025). Will AI replace humans in phishing attacks? Retrieved from https://www.securitymagazine.com/articles/100000-will-ai-replace-humans-in-phishing-attacks

SecurityWeek. (2025). AI Now Outsmarts Humans in Spear Phishing, Analysis Shows. Retrieved from https://www.securityweek.com/ai-now-outsmarts-humans-spear-phishing-analysis-shows

Thales. (2025). Thales Data Threat Report 2025. Retrieved from https://www.thalesgroup.com/en/markets/digital-identity-and-security/data-threat-report

U.S. Congress. (2025). AI Advancement Act: Investing in America's Future. Retrieved from https://www.congress.gov/bill/118th-congress/house-bill/1234

U.S. Department of Education. (2025). Responsible AI Integration in Schools: A Pathway to Future Careers. Retrieved from https://www.ed.gov/ai-integration-schools

DEV Community: Dr. Feliks Kravets

Phishing Training for End Users

How AI Is Changing the Game in Phishing Attacks