Ah, the sweet irony of AI. On one hand, it's the darling of tech innovation, automating tasks, and making our lives easier. On the other hand, it's a Pandora's box of cybersecurity nightmares.
IBM's recent research on ChatGPT's proficiency in crafting phishing emails is a wake-up call. It's like handing a Stradivarius to a scam artist and saying, "Play me the world's saddest song."
Let's break down the numbers. IBM's X-Force team pitted human-written phishing emails against those penned by ChatGPT in an A/B test involving a global healthcare company's 1,600 employees. The human-crafted email tricked 14% of recipients into clicking a malicious link. ChatGPT? A close second at 11%.
Here's the kicker: it took IBM's team 16 hours to craft their email, while ChatGPT churned out its version in just five minutes. Efficiency, thy name is AI.
Stephanie "Snow" Carruthers, IBM's chief people hacker, said it best: "If this is what it's at right now, what's it going to be like in, I was going to say five years, but honestly six months?" It's a chilling thought.
OpenAI has implemented safeguards to prevent ChatGPT from generating phishing emails, malware, or other cyber tools of mass destruction, but there are plenty of open source AI models that will do a great job writing phishing emails.
According to Carruthers, the human element still has the upper hand in emotional intelligence. She said ChatGPT's phishing emails felt "cold and robotic," but don't get too comfy; AI is improving exponentially, and it's only a matter of time before it masters the art of digital deception.
To paraphrase Joseph Nye: "Cybersecurity is a lot like oxygen. You don't think about it until it's gone." As AI tools become more sophisticated, so will the tactics of those who wield them for nefarious purposes. It's a never-ending game of cat and mouse. Right now, the mouse is doing push-ups, taking steroids, and reading Sun Tzu's "The Art of War."
As always your thoughts and comments are both welcome and encouraged. Just reply to this email. -s
P.S. If you want to learn how good marketers and bad actors are using generative AI and autonomous agents to create highly effective email campaigns, sign up for our free online course .
ABOUT SHELLY PALMER
Shelly Palmer is the Professor of Advanced Media in Residence at Syracuse University’s S.I. Newhouse School of Public Communications and CEO of The Palmer Group, a consulting practice that helps Fortune 500 companies with technology, media and marketing. Named he covers tech and business for , is a regular commentator on CNN and writes a popular . He's a , and the creator of the popular, free online course, . Follow or visit .