CoreQ Academy3.2 Explain how AI enables or enhances attack vectors.
Attackers use the same tools. AI lowers the skill needed, raises the quality of lures and lets attacks scale. Defenders need to expect convincing fakes and faster campaigns.
AI-generated content (deepfake)
- Impersonation
- Synthetic voice or video of an executive used to authorise payments or reset access. Defend with call-back verification and payment controls that do not rely on voice or video alone.
- Misinformation
- False content spread without intent to deceive.
- Disinformation
- Deliberately false content created to deceive, now cheap to produce at scale.
Enhanced attack techniques
- Adversarial networks
- GANs and adversarial techniques used to craft content that fools detectors.
- Reconnaissance
- AI quickly gathers and summarises public information about targets and staff.
- Social engineering
- Fluent, personalised phishing in any language, at volume.
- Obfuscation
- AI rewrites malicious code or text to evade signatures and filters.
- Automated data correlation
- Linking leaked datasets and public data to build target profiles.
Automated attack generation
- Attack vector discovery
- Automated searching for exposed services and likely weaknesses.
- Payloads
- Generating or adapting exploit payloads.
- Malware
- Writing or mutating malicious code, including polymorphic variants.
- Honeypot
- Attackers can use AI to recognise honeypots, and defenders can use AI to build more convincing ones.
- Distributed denial of service (DDoS)
- AI can tune attack traffic to evade mitigation and target weak points.
Check your understanding
Loading quiz…
Original CoreQ Academy material, mapped to objective 3.2 of the publicly available CompTIA SecAI+ CY0-001 exam objectives (Exam objectives V1, document version 1.1). Not affiliated with or endorsed by CompTIA. Contains no exam questions.