Phishing has always been the favoured gateway for advanced persistent threats — but AI has rewritten the rules. In this session, James Dyer exposes how a recent large-scale phishing APT leveraged deepfakes, cloned voices, and generative AI to create unprecedented levels of deception and persistence.

Attendees will see how threat actors are operationalising AI to automate reconnaissance, craft hyper-personalised lures, and deliver synthetic interactions that blur the line between human and machine. The talk will dissect the campaign's tactics, infrastructure, and social engineering methods, highlighting how traditional detection and awareness models are being outpaced.

Finally, Dyer will explore how organisations can adapt — from enhancing phishing resilience and deepfake detection to reshaping threat intelligence processes in an era where seeing and hearing are no longer believed.