Democratized Deception - How Threat Actors Are Weaponizing AI to Scale Cybercrime

Explore how cybercriminals are leveraging artificial intelligence to revolutionize deception and scale cybercrime operations in this 36-minute conference talk from DevConf.IN 2026. Examine the dramatic shift in the threat landscape through real-world cases like the $25 million Arup deepfake scam, where AI-generated faces and voices fooled finance officers in a fabricated video conference. Discover how the same generative AI tools used for legitimate purposes—writing code, creating documentation, and summarizing meetings—are being weaponized to automate phishing campaigns, create synthetic identities, generate polymorphic malware, and orchestrate large-scale disinformation operations. Learn from insights gathered by Google's Threat Intelligence Group, Microsoft's Digital Defense Report, and Mandiant about how AI has democratized sophisticated deception techniques, lowering barriers for both criminal and state actors. Understand the anatomy of AI-enabled threat activities and trace how adversaries deploy large language models and diffusion models in active attacks. Gain practical knowledge about building defensive strategies including behavioral anomaly detection systems, AI-aware phishing simulations, and governance frameworks for responsible internal AI usage. Master techniques for detecting linguistic, behavioral, and media-based AI deception while developing a comprehensive mitigation framework that combines AI governance, behavioral analytics, and enhanced security awareness training.