AI-generated phishing pushes click-through rates above 60%, cited account says

Attackers are using ChatGPT and Gemini to write polished phishing emails, weakening poor grammar and unnatural language as traditional warning signs. A cited account said phishing click-through rates rose from about 11–12% roughly a year ago to more than 60%, attributing the increase to messages that appear highly realistic and grammatically polished.

The account also said open-weight models can provide a playbook for carrying out an attack, lowering the expertise barrier for sophisticated cyberattacks. It described AI-generated phishing as increasingly difficult to distinguish from legitimate communications, while presenting the lower barrier as a risk that more people will be able to conduct such attacks.