Hackers deploy AI to steal money, personal data: Report

Bengaluru: Artificial Intelligence (AI) is proving to be a boon for hackers and cybercriminals, helping them execute attacks faster and with greater efficiency, a new report has revealed.

Titled 'The Rise of AI-Powered Cybercrime: India’s Threat & Mitigation Report 2025', the document, prepared by GIREM (Global Initiative for Restructuring Environment and Management) in partnership with automotive retail tech company Tekion, found that AI tools were involved in nearly 82.6% of all phishing emails — placing AI in eight out of every 10 such campaigns.

"In several cases, these emails mimicked trusted brands or individuals using AI-generated templates, greatly improving their credibility. These AI-enhanced tactics have made phishing attempts far more convincing, targeted, and effective,” the report noted.

Beyond composing emails, cybercriminals are using AI to create realistic dashboards, register fake domains posing as investment platforms, and develop dynamic, interactive phishing pages.

The report highlighted that Deepfake technologies are also being deployed to replicate voices and faces for advanced social engineering and identity spoofing.

"AI-driven malware can adapt in real time to evade detection by traditional security tools. Cybercriminals use AI to automate vulnerability scans, analyse vast datasets of stolen information, and quickly generate exploit code. Even tools like ChatGPT, while equipped with safeguards, have raised concerns for their misuse in generating malicious content such as scam scripts, fake legal notices, or technical obfuscation,” it added.

At the same time, AI is being harnessed to fight cybercrimes, with a growing number of AI-powered defence systems scanning datasets, detecting anomalies, and providing round-the-clock protection.

"In India, AI is increasingly integrated into financial systems like UPI and government services like Aadhaar, helping detect fraud in real time and secure critical data,” the report stated.

It recommended raising public awareness, setting up cybersecurity labs in schools and colleges, running workplace programmes, launching public campaigns, and establishing a cyber emergency alert system.