AI-Powered Phishing Waves Target Global Businesses with Advanced Attacks

Cybercriminals launched approximately 7 million AI-driven phishing attacks in August 2026, according to reporting from Börse Express. These campaigns utilize generative artificial intelligence to increase the scale and sophistication of fraudulent messages, targeting a broad range of sectors including financial institutions and corporate enterprises.

The surge in AI-integrated phishing is characterized by higher engagement rates and the exploitation of trusted cloud infrastructure. Data from it boltwise indicates that AI-powered phishing has reached a 54% click-through rate, with banking institutions identified as primary targets.

Exploitation of Microsoft and Cloudflare Services

Attackers are increasingly leveraging official service providers to bypass security filters. Netzpalaver reports that 120 companies were targeted through phishing emails sent via official Microsoft services, which allows the messages to appear legitimate to security software and end users.

Similar tactics are appearing in collaboration tools. Security-Insider reports that phishing campaigns are now targeting Microsoft Teams users by employing fraudulent login pages that mimic the actual service to steal credentials.

Beyond email and chat, attackers are utilizing edge computing for credential theft. According to blogspan.net, phishing operations are using Cloudflare Workers to deploy deceptive interfaces. These attacks specifically employ “painted windows”—graphical overlays that mimic legitimate login screens—to bypass multi-factor authentication (MFA) protocols.

Technical Shift Toward AI-Enhanced Social Engineering

The shift toward AI allows attackers to automate the creation of highly convincing, personalized lures at a volume previously impossible with manual drafting. The 7 million attacks cited by Börse Express represent a move toward mass-scale precision, where AI generates context-specific content to trick users into clicking malicious links.

The 54% click rate reported by it boltwise suggests that traditional employee training and static email filters are struggling to keep pace with AI-generated content. By tailoring the language and urgency of the messages, these attacks more effectively deceive users, particularly within the banking sector where high-pressure financial transactions are common.

Summary of Current Phishing Vectors

• AI-Generated Content: Used to scale attacks to millions of targets while maintaining high click rates, as reported by Börse Express and it boltwise.
• Trusted Infrastructure: Abuse of official Microsoft services and Cloudflare Workers to evade detection, according to Netzpalaver and blogspan.net.
• MFA Bypass: Use of visual overlays and fake login pages on platforms like Microsoft Teams to steal secondary authentication tokens, as detailed by Security-Insider and blogspan.net.