AI-Driven Identity Attacks: From Phishing to Session Hijacking

Nakovski, Toni and Blazheska-Tabakovska, Natasha (2026) AI-Driven Identity Attacks: From Phishing to Session Hijacking. In: 2026 61st International Scientific Conference on Information, Communication and Energy Systems and Technologies (ICEST), 01-03 July 2026, Nis, Serbia.

[thumbnail of AI-Driven Identity Attacks- From Phishing to  Session Hijacking eprints.pdf]
Preview
Text
AI-Driven Identity Attacks- From Phishing to Session Hijacking eprints.pdf

Download (82kB) | Preview

Abstract

Identity-based attacks have become the primary vector for cyber intrusions, fundamentally shifting the cybersecurity landscape from the exploitation of software vulnerabilities to the compromise of valid user accounts. This paper presents an empirical analysis of a 15-month dataset collected from a managed Security Operations Center (SOC) comprising 10,046 incidents across 31 organisations spanning multiple sectors, including hospitality, shipping, real estate, non-governmental organisations (NGOs) and financial services. The results indicate that identity-related incidents account for 35.9% of total SOC activity, with a notable increase in both the volume and the sophistication of phishing attacks observed in early 2026. These findings are examined in the context of the evolving threat landscape, highlighting the role of generative artificial intelligence in enabling highly convincing, multi-stage phishing campaigns capable of bypassing Secure Email Gateways (SEGs). The paper further analyses postcompromise techniques, including the creation of malicious inbox rules and Business Email Compromise (BEC). Finally, the paper outlines key defensive measures, emphasising phishing-resistant Multi-Factor Authentication (MFA) and Identity Threat Detection and Response (ITDR) as essential components of modern cybersecurity.

Item Type: Conference or Workshop Item (Paper)
Subjects: Scientific Fields (Frascati) > Natural sciences > Computer and information sciences
Divisions: Faculty of Information and Communication Technologies
Depositing User: Mrs Natasha Blazheska-Tabakovska
Date Deposited: 25 Sep 2026 15:39
Last Modified: 25 Sep 2026 15:39
URI: https://eprints.uklo.edu.mk/id/eprint/11822

Actions (login required)

View Item View Item