Microsoft warns that cybercriminals are increasingly using artificial intelligence to enhance cyberattacks.

Security researchers say AI helps automate phishing campaigns, malware development, and other stages of the attack lifecycle.

Most threat actors do not build their own advanced models but instead rely on widely available generative AI tools. These tools are used to write phishing messages, translate and analyze stolen data, generate or debug malware, and quickly set up attack infrastructure.

The main impact of AI is increased efficiency. It speeds up attack preparation, automates time-consuming tasks, and allows attackers to target many more victims at the same time. However, human expertise and traditional hacking techniques are still essential.

AI also helps attackers recover faster when their operations are blocked by generating new malicious code, rotating infrastructure, and adapting phishing campaigns.

Experts note that AI currently acts mainly as a force multiplier for existing attack methods. In the future, more advanced “agentic” AI could enable semi-autonomous tasks such as reconnaissance, infrastructure management, and adaptive attack planning.