[REVISION HISTORY]

AI phishing evolution and AfD data breach fallout

43 recorded revisions of this situation.

What changed

2026-11-03 12:06 UTC → 2026-11-04 04:50 UTC · added ~~removed~~

The cyber-threat landscape is undergoing a rapid transformation driven by ‘phishing 3.0’, where AI agents automate research and adaptation to conduct multi-channel attacks using deepfakes, manipulated voices, and videos. Recent developments show a shift toward ‘agentic AI’, where autonomous multi-agent frameworks manage entire attack lifecycles. This includes the use of AI to generate malicious websites directly within browsers and the exploitation of ‘Shadow AI’. Newer attack vectors have emerged targeting trusted communication platforms. Researchers have identified SynkLoader, a polymorphic malware family that exploits Microsoft Teams by impersonating IT help desks. Additionally, calendar-based phishing attacks, or ‘calishing’, have seen a significant rise. Cybersecurity firm Check Point reported that since late September, over 300,000 messages—utilizing fake .ics files or fraudulent meeting links—have affected more than 40,000 organizations. A ‘dual-target’ phishing tactic has also been identified, utilizing prompt injection to deceive both human recipients and AI-powered email assistants. Political organizations in Germany remain significant targets. The Alternative for Germany (AfD) is investigating a massive data breach involving the theft of approximately 421,000 internal emails and 281 gigabytes of data from a hosting provider. The leak, attributed to a group named Hexane, has exposed internal tensions and financial irregularities. Investigations by Yle, OCCRP, and CORRECTIV have revealed that the party stored the personal data of at least 1,000 journalists publicly for years. Leaked communications from 2015 to 2017 further reveal that party leader Alice Weidel previously criticized Björn Höcke’s political positions as racist and problematic. The leak also raises questions regarding past campaign financing, specifically involving a 2017 social media campaign and 132,000 euros received from a Swiss-based billionaire. Furthermore, the leak has prompted fresh investigations into the party’s involvement in the 2017 ‘Extrablatt’ flyer campaign.

Versions

Select a version to see what changed compared to the one before it.