Social Engineering and AI Fuel Unprecedented Cybersecurity Threats in 2025

Social Engineering Attacks Surge as Cybercriminals Shift Tactics

Cybersecurity threats are undergoing a significant transformation in 2025, with attackers increasingly focusing on human psychology rather than technological vulnerabilities, according to recent threat intelligence reports. Mimecast’s latest Global Threat Intelligence Report, which analyzed trillions of signals from January to September 2025, indicates that social engineering techniques and artificial intelligence abuse are becoming the weapons of choice for modern cybercriminals.

Social Engineering Attacks Surge as Cybercriminals Shift Tactics
Clickfix Attacks Experience Explosive Growth
AI-Powered BEC Scams Become Increasingly Sophisticated
High-Risk Industries Targeted
Protection Strategies Evolving

Clickfix Attacks Experience Explosive Growth

Security analysts have documented a staggering 500% increase in Clickfix attacks during the first half of 2025, with this social engineering technique now accounting for approximately 8% of all cyberattacks. Clickfix represents a dangerous evolution in phishing methodology that bypasses traditional security measures by convincing victims to voluntarily provide initial access to their systems.

According to threat researchers, this technique involves displaying fake error messages, technical issue alerts, or offers for free licensed software alongside step-by-step guides. Unfortunately, these guides direct users to launch PowerShell and input commands that trigger the download of malicious payloads including information stealers, ransomware, and remote access trojans.

Hiwot Mendahun, Mimecast Threat Research Engineer, told industry publications that threat actors are adopting Clickfix as a primary means of initial access, and analysts suggest “it will continue to be used as a means to download infostealers, ransomware, remote access trojans (RATs), and custom malware.”

AI-Powered BEC Scams Become Increasingly Sophisticated

Artificial intelligence is revolutionizing business email compromise (BEC) scams, making them significantly more difficult to detect. While executive impersonation in phishing campaigns is nothing new, sources indicate that AI is now being used to generate complete conversation chains that impersonate multiple people including vendors, executives, and third parties., according to market insights

During reconnaissance phases, attackers gather financial information, HR data, and payroll details that are then incorporated into AI-generated email threads. These fabricated conversations typically create a sense of urgency, such as requests for immediate invoice payments, bank account detail changes, or wire transfers.

“The use of AI in these campaigns specifically gives threat actors the ability to really mass-produce a more targeted thread using automation and potentially altering content to help bypass content-based detection,” Mendahun commented. Security experts warn that as AI abuse ramps up with deepfake voice and video content, these scams will become increasingly challenging to identify.

High-Risk Industries Targeted

According to the threat intelligence analysis, education, telecommunications, legal services, and real estate companies face the highest risk of impersonation and social engineering attacks. These sectors are particularly vulnerable because they typically have direct access to high-value targets, handle sensitive financial transactions, and manage confidential client information.

The report specifically notes that social engineering attack rates in the real estate sector are steadily climbing, suggesting that some criminal groups are pivoting to this industry and away from more traditional targets. Security researchers have linked groups including Scattered Spider and TA2541 to attacks against these high-value industries.

Protection Strategies Evolving

As phishing and social engineering tactics continue to evolve, cybersecurity professionals emphasize that employee education remains crucial. The emergence of Clickfix techniques and AI-powered BEC scams highlights the need for comprehensive security awareness training that addresses these specific threats.

Security analysts recommend that organizations implement multi-layered verification processes for financial transactions, particularly those involving invoice payments, bank account changes, and wire transfers. Additionally, companies should establish clear protocols for handling technical support requests and software installation guidance to prevent Clickfix attacks from succeeding.

With cybercriminals increasingly leveraging both sophisticated social engineering and artificial intelligence, the human element has become the primary battlefield in cybersecurity defense. Industry experts suggest that maintaining vigilance and implementing robust verification procedures will be essential for organizations seeking to protect against these evolving threats throughout 2025 and beyond.