this post was submitted on 28 Oct 2023
245 points (94.9% liked)

Technology

59311 readers
5315 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

IBM researchers said a ChatGPT-generated phishing email was almost as effective in fooling people compared to a man-made version.

you are viewing a single comment's thread
view the rest of the comments
[–] Bogasse@lemmy.ml 24 points 1 year ago (1 children)

To be honest, phishing emails are so bad that I don't see how any generational AI couldn't be better. Just making less than two typos per sentence would e enough.

Someone explained me that it may be intentional that phishing emails are so bad as it acts as a pre-filter, then you only spend time and ressources dealing with presumably very gullible people.

[–] Artyom@lemm.ee 4 points 1 year ago (1 children)

The typos are intentional. They filter out intelligent recipients who wouldn't fall for the scam.

[–] hedgehog@ttrpg.network 4 points 1 year ago

The typos have been theorized to be intentional (for that reason), but that isn’t the only theory, and afaik those theories aren’t based off conversations with the people crafting those emails.

It’s also been theorized that phishing emails frequently have typos (intentionally) to lower people’s resistance to well-crafted phishing emails, particular spear phishing.

There’s also the fact that many phishing emails are crafted by people for whom English is not their first language, and even given that, phishing emails are still better written than spam emails, so it’s quite likely that in many cases it isn’t intentional at all.