AI-Based Cybersecurity Attacks
Introduced| English | Meaning |
|---|---|
| deepfake/ˈdiːpfeɪk/ | Synthetic or altered media made using AI to imitate a person's appearance, voice or actions. |
| large language models/lɑːdʒ ˈlæŋɡwɪdʒ ˈmɒdlz/ | large language models |
| phishing/ˈfɪʃɪŋ/ | Deceptive communication designed to persuade someone to reveal information, send money or perform an unsafe action. |
| shared secret/ʃeəd ˈsiːkrɪt/ | Confidential information known to authorised parties and used for a purpose such as authentication or encryption. |
AI supercharges attacks
- A deepfake 深度伪造 clones a voice or face to impersonate someone on a call.
- Large language models (LLMs) 大语言模型 write perfect phishing 钓鱼 emails in any language.
- Bad grammar used to expose scams — AI removes that clue.
AI on the back end
- Adversaries craft prompts to pull secret data out of an LLM.
- They plant false info online so it poisons an LLM's training data.
- AI scans the internet to gather facts about a target and even writes malware.
How attackers use AI: phishing, deepfakes and self-changing malware
AI attack or AI defense?
AI is dual-use: the same technology helps adversaries attack and defenders protect.
An AI clone of a person's voice used to impersonate them is a...
Difficulty 1/5 · 100 coins + a small bonus on first completion today
A deepfake clones a voice or face.
How do LLMs make phishing emails more dangerous?
Difficulty 1/5 · 100 coins + a small bonus on first completion today
Perfect language removes the bad-grammar clue.
Defending against AI attacks
- Agree on a shared secret 共享秘密 word with close contacts to verify identity.
- Enable MFA so a cloned voice alone cannot log in.
- Never type sensitive data into a chatbot; verify AI output with real sources.
A voice on the phone that sounds exactly like your boss may be a deepfake. Verify a surprising or urgent request through a second channel before acting on it.
An adversary who has cloned your voice can always get past MFA.
Difficulty 1/5 · 100 coins + a small bonus on first completion today
False. A second factor such as a code or hardware key is still needed, so a voice-only attack is blocked.
A word known only to two people, used to verify identity, is a shared ____.
Difficulty 1/5 · 100 coins + a small bonus on first completion today
A shared secret authenticates in high-stakes moments.
Which defend against AI-augmented attacks? (Choose all)
Difficulty 2/5 · 140 coins + a small bonus on first completion today
Never type sensitive data into a chatbot.
An employee gets a video call from the "CEO" asking to wire money urgently. The face and voice are an AI deepfake. A prearranged shared secret question — "What did we name the project last week?" — would expose the fake instantly.
AI lets adversaries make deepfakes, write flawless phishing, poison LLM data, and automate reconnaissance. Defend with a shared secret, MFA, and by never trusting AI output blindly.