AI-powered phishing is surging — attacks jumped roughly 14x in a single month this year, according to multiple industry trackers. The old tells are gone: bad grammar, obvious urgency, fake sender names. Today’s phishing emails copy your CEO’s writing style, reference real projects, and pass email filters that used to catch them. CISA’s advisories document the current wave of campaigns.
Why this hits South Florida hard
South Florida’s economy is built on small and mid-sized businesses — medical practices, manufacturers, professional firms — that run lean IT teams or none at all. Those are exactly the targets AI-powered phishing is optimized for: organizations with data worth stealing and fewer layers of defense than a large enterprise.
We’re also a region where business happens fast and informally. A “quick invoice question from the owner” on a Friday afternoon doesn’t seem suspicious — until it’s a wire transfer to a fake vendor.
What’s changed
- Attackers clone real email threads using AI writing mimicry — they read your inbox patterns and sound like your actual colleagues.
- Deepfake audio and video are being used in “CEO fraud” calls, where a cloned voice instructs a finance person to approve a payment.
- Spear-phishing volume per target is way up — attackers now personalize at scale, so every message looks like it was written for one person. Because it was.
Why traditional filters aren’t enough
Legacy email filters catch known-bad senders and malware signatures. AI-powered phishing doesn’t have a signature — each message is unique, written to look legitimate. The filter can’t flag what it’s never seen, which is why relying on email security alone is like locking your front door but leaving the window open.
The Defense Against AI-Powered Phishing That Still Works
Technology alone won’t stop AI-powered phishing. The layered approach does: strong email filtering plus multi-factor authentication everywhere plus staff training that’s current, not a once-a-year video.
Multi-factor authentication is the critical piece — even when a credential gets phished, MFA blocks the account takeover. That single control stops most of the damage AI-powered phishing causes. It’s also the cheapest high-impact change most businesses can make this week. The FTC’s small-business cybersecurity guidance covers the rest of the baseline.
Nextek IT’s cybersecurity services for South Florida businesses combine all three layers — and our clients get simulated phishing tests that measure whether training actually sticks, not just whether it was assigned.
Quick FAQ
Can MFA really stop AI-powered phishing? Most of the time, yes. Even when credentials are phished, multi-factor authentication blocks the account takeover — the single most effective control against credential theft.
How do we train staff without boring them? Short, frequent, scenario-based training plus simulated phishing beats a once-a-year video. Measure click rates and retrain the repeat offenders.
What if an employee already clicked? Act fast: rotate passwords, check for new inbox rules (attackers often add forwarding rules), and call your IT provider immediately.
How do attackers get the context to clone a CEO’s style? Public sources first: LinkedIn posts, company announcements, press coverage, even the language on your own website. Then they build from replies — every “got it, thanks” exchange trains the model. That’s why the most convincing phishing often arrives just after a company announcement: the attacker is riding the same news cycle your employees are.
Does email filtering still matter if AI can bypass it? Absolutely — filtering is still your first line, catching the bulk automated campaigns before they reach inboxes. What changes is that you can’t rely on it alone. Think of filtering as the moat, MFA as the locked door, and training as the guards. Skip any one and the defense has a hole.
The one test worth running
If your team hasn’t had a phishing simulation this year, that’s the cheapest high-impact test you can run. It takes a day to set up, and the results will tell you exactly which employees need more training — and which policies are the weakest link. Talk to Nextek IT about running one.