{"id":122298,"date":"2026-07-16T15:27:05","date_gmt":"2026-07-16T13:27:05","guid":{"rendered":"https:\/\/monetplus.cz\/even-the-best-it-expert-will-click-the-wrong-link-eventually\/"},"modified":"2026-07-20T10:10:48","modified_gmt":"2026-07-20T08:10:48","slug":"even-the-best-it-expert-will-click-the-wrong-link-eventually","status":"publish","type":"post","link":"https:\/\/monetplus.cz\/en\/even-the-best-it-expert-will-click-the-wrong-link-eventually\/","title":{"rendered":"Even the Best IT Expert Will Click the Wrong Link Eventually"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Today’s cyberattack techniques are so sophisticated that successfully protecting an organization no longer rests solely on a strong firewall or the technical components of critical infrastructure. Cybersecurity also relies on informed colleagues who are not afraid to speak openly, share risks, and flag mistakes in time. <\/strong><\/p>

This was one of the takeaways<\/span> from our latest Monet+ Security Brunch<\/b>, organized in cooperation with Gen <\/span>on the topic of Cybersecurity in the Financial Sector. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"_DSF9870\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
How Generative AI Is Changing the Rules of the Game in Cybercrime<\/b><\/h5>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Michael Sal\u00e1t, Threat Intelligence Director at Gen, accepted our invitation to the Security Brunch. In his talk, based on the current “Consumer Threat Landscape” analysis, he demonstrated in detail how attackers are dramatically increasing the sophistication, speed, and success rate of their methods through the massive use of artificial intelligence. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The most significant phenomena of today include:<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
  • The rise of AI in phishing (Vibe Scams and Promptmorphism)<\/strong>
    <\/span>While building convincing fraudulent websites once required experienced developers, today a single text instruction (prompt) for AI is enough to create a perfect replica of a banking interface. AI also generates polymorphic malware ( <\/span>promptmorphism<\/i>) that changes its own code faster than traditional signature-based detection can identify it.

    <\/p><\/li>

  • Ad fraud (The Scam Ad Machine)
    <\/b>Fraudulent ads are massively flooding social networks. Analyses show that on selected platforms, up to <\/span>1 in 3 ads is fraudulent<\/b> (31% of 14.57 million analyzed samples). These campaigns abuse the logos of real brands and deliver up to 41% of all cyberattacks through malvertising. <\/span><\/span>

    <\/p><\/li>

  • Deepfakes and synthetic identities<\/b>
    Attackers generate indistinguishable voice and face forgeries for targeted vishing and investment scams. In the area of KYC (Know Your Customer), fraudsters also use AI to generate complete fake identity documents and selfie photos of people who never existed (so-called synthetic identities), which standard verification processes often fail to detect. <\/span><\/span>

    <\/p><\/li>

  • Fake Captcha verification (ClickFix) and AI Agent Hijacking
    <\/b>New techniques manipulate users into unknowingly executing malicious code from the clipboard under the pretext of identity verification. Moreover, if users rely on AI assistants connected to banking APIs, attackers can embed hidden instructions in web content that the assistant then executes without the user’s knowledge \u2013 for example, transferring funds. <\/span><\/span>

    <\/p><\/li>

  • Sophisticated abuse of legitimate platforms<\/b>From WhatsApp Ghost Pairing attacks<\/i> (silently linking an attacker’s device via a QR code) to Reservation Hijack Scams (e.g., on Booking.com), where attackers take over hotel staff accounts and message guests directly from a legitimate internal system, making the fraudulent payment link appear completely trustworthy.From WhatsApp Ghost Pairing attacks (silently linking an attacker’s device via a QR code) to Reservation Hijack Scams (e.g., on Booking.com), where attackers take over hotel staff accounts and message guests directly from a legitimate internal system, making the fraudulent payment link appear completely trustworthy.<\/span><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t\t\t\t
    \n\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"_DSF0279\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t\t\t\t
    \n\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t
    \n\t\t\t
    <\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t\t\t\t
    \n\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t
    A Fourfold Increase in Attacks<\/b><\/h5>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t\t\t\t
    \n\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t
    \n\t\t\t
    <\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t\t\t\t
    \n\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    That technical security alone is not enough was confirmed by representatives of the insurance company Kooperativa \u2013 Zden\u011bk Adamec (Chief Security Officer) and Petr Hejda (Chief Information Security Officer). Data from their Security Operations Center (SOC) show that the volume of automated and AI-driven attacks is growing radically. <\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

    \n\t\t\t\t\t\t
    \n\t\t\t\t\t
    \n\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t
    Indicator<\/th>2025 statistics<\/th><\/tr><\/thead>
    Total number of incidents<\/td>23,406<\/span> \/more than a fourfold increase compared to 2024<\/span><\/td><\/tr>
    Average monthly volume<\/td>1,950<\/span> investigated events<\/span><\/td><\/tr>
    Monthly e-mail throughput<\/td>3.4 million<\/span> of which 232,800 spam and 5,700 malware<\/span><\/td><\/tr><\/tbody><\/table>