AI and the Εvolution of Social Engineering in Cybersecurity

Cybersecurity has become an urgent concern for individuals, governments, organizations, and industries worldwide. The number of cyberattacks and their associated costs are steadily increasing every year, with a significant proportion of these incidents linked to social engineering methods. Social engineering exploits human psychology to manipulate individuals into sharing confidential information or performing actions that compromise security. This type of attack continues to thrive because, despite advancements in technology and security protocols, humans remain the weakest link in the cybersecurity defense chain. Social engineering exploits this vulnerability, making it one of the most effective methods used by threat actors.
In recent years, artificial intelligence (AI) has significantly accelerated technological advancements across various fields. This progress has not gone unnoticed by cybercriminals, who are now utilizing AI to refine and enhance their social engineering tactics. By using AI, attackers can automate, personalize and customize their strategies, making their attempts more convincing and challenging to detect. For example, AI-powered tools can analyze large volumes of data to craft highly targeted phishing emails, or even imitate speech patterns in phone calls to impersonate family members or other legitimate contacts.
This thesis investigates the current landscape of cybersecurity threats, focusing on social engineering as a primary attack method. We explore why and how social engineering works, examining both the psychological principles behind it and the technological advancements, particularly AI, that are enhancing its effectiveness. Additionally, we explore a potential future link between DNA digitization, DNA hacking, Cyberbiosecurity and social engineering, predicting that they will be directly linked in the following years.
Lastly, the thesis considers the future of social engineering in the context of AI and proposes best practices and defenses that individuals can adopt to protect themselves. As cyber threats evolve, understanding these dynamics is crucial for developing effective countermeasures in the ongoing battle for cybersecurity.
We use sources from both the industry, the leading global cybersecurity experts, and academic research, in an attempt to bridge the gap between the two fields.