Microsoft blocks phishing scam which used AI-generated code to trick users

Image depicting hands typing on a keyboard, with phishing hooks holding files, passwords and credit cards.

• AI generated code used in phishing campaign, blocked by Microsoft Defender
• Attackers used SVG file disguised as PDF, with hidden business themed code inside
• Security Copilot flagged AI style traits, like verbose identifiers and generic comments

AI code is now used across industries for a range of tasks, and in cybersecurity, both security teams and attackers are increasingly turning to large language models to support their work.