Security researchers at Microsoft recently spotted a flood of fraudulent emails that highlight how threat actors are increasingly using AI in attempting to bilk companies.

Business email compromise (BEC) scams have been around for a while, but the researchers said that what’s notable is how the “adoption of AI has enabled threat actors to improve their campaign templates and construct emails tailored to their recipients.”

Also new, according to Microsoft: Fraudsters are using multiple tactics in the same email to make the missives appear to be authentic. 

In early August, the researchers found a campaign made up of more than a million emails targeting its users. Using several third-party services to dispatch the emails, the attackers impersonated top executives at firms, telling accounts payable departments to send fraudulent payments of nearly $50,000. 

The attackers made the emails appear more legitimate by including a forwarded email thread from the fake CEO to ServiceNow, a cloud-based enterprise platform that automates workflows and business processes. (ServiceNow also was impersonated.)

The forwarded emails fabricated an email chain where the phony CEO sent invoices allegedly received from ServiceNow (which was also being impersonated).