{"id":34395,"date":"2026-06-04T19:59:35","date_gmt":"2026-06-04T19:59:35","guid":{"rendered":"https:\/\/www.adminbyrequest.com\/en\/?p=34395"},"modified":"2026-06-07T20:00:06","modified_gmt":"2026-06-07T20:00:06","slug":"nation-state-hackers-are-showing-what-ai-assisted-attacks-can-do","status":"publish","type":"post","link":"https:\/\/www.adminbyrequest.com\/en\/blogs\/nation-state-hackers-are-showing-what-ai-assisted-attacks-can-do","title":{"rendered":"Nation-State Hackers Are Showing What AI-Assisted Attacks Can Do"},"content":{"rendered":"\n

Cybersecurity researchers and major tech firms have spent the past few weeks documenting something that’s been building quietly for a while. Iranian-linked threat actors are running their cyber operations through western AI tools<\/a>, using ChatGPT and Gemini to write malware, scan for vulnerabilities, and generate phishing messages in fluent Hebrew and Arabic.<\/p>\n\n\n\n

The pressure that creates on a target shows up in the volume. The UAE government reported facing over half a million cyberattack attempts per day<\/a> during the regional conflict, a large share of them AI-assisted. Israeli citizens have been hit by repeated waves of phishing texts and emails, some of them aimed at recruiting recipients as intelligence sources.<\/p>\n\n\n\n

It’s a striking set of findings, though the most useful takeaway has little to do with Iran specifically.<\/p>\n\n\n\n

The Skill Floor Just Dropped<\/h2>\n\n\n\n

For most of the history of organized cybercrime, a meaningful gap separated what nation-state actors could pull off from what lower-tier attackers could manage. Sophisticated operations required expertise: writing convincing phishing content, mapping target networks, developing or adapting malware, and operating fluently across language and cultural barriers. That gap was never impenetrable, but it was enough to keep a lot of would-be attackers out of the serious leagues.<\/p>\n\n\n\n

AI has compressed it considerably. Both Google and OpenAI have made a point that’s worth sitting with, which is that AI mostly improves attacker workflows rather than handing them genuinely new capabilities<\/a>. Reconnaissance, phishing content, vulnerability research, and malware debugging are all the same tasks they always were, just done faster and with far less prior expertise. A mid-tier actor can now operate with the throughput of a much larger, better-resourced one.<\/p>\n\n\n\n

The practical result is that the pool of actors capable of running a credible attack operation is wider than it’s ever been, and that’s the part worth paying attention to.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

The Language Barrier Is Gone<\/h2>\n\n\n\n

Security awareness training has long leaned on a heuristic that served reasonably well: suspicious emails tend to look suspicious. Odd phrasing, grammatical errors, and awkward sentence structures were never a foolproof signal, but they caught a decent share of phishing attempts before any damage was done.<\/p>\n\n\n\n

That heuristic is becoming unreliable. The Iranian operations described in recent reporting were producing phishing messages in fluent Hebrew and Arabic, convincing enough to work at scale. The AI capabilities behind that go well beyond language, too. Attacks that once took weeks of careful human effort can now be put together in minutes:<\/p>\n\n\n\n