Know What's Happening in Cybersecurity

Hackers Are Using LLMs to Build the Next Generation of Phishing Attacks - Here's What to Look Out For

Security researchers at Palo Alto Networks’ Unit 42 have demonstrated a proof‑of‑concept where generative AI models produce on‑the‑fly JavaScript that creates personalized phishing pages. The technique sends prompts to a legitimate LLM API, receives unique code for each visitor, and executes it in the browser, eliminating static payloads that traditional scanners can capture. While no wild‑case attacks have been confirmed, the building blocks—LLM‑generated obfuscated scripts and runtime execution—are already in use across malware campaigns. Unit 42 warns that dynamic, AI‑driven phishing is the next evolution of scams.