TechKnowSurge
CompTIA Security+ 2.2 CompTIA Security+ 5.6
InteractiveSecurityFree

How Is AI Being Used?

Attackers use AI three ways in this lesson. Name which one each case shows.

⚑ Complete this interactive to capture a CTF flag worth 5 points.

About this interactive

What you are doing: naming how each attack uses AI. The lesson’s three uses, from CrowdStrike’s 2025 threat report. AI-written lures: large language models write phishing messages, which the report found far more effective than human-written ones. Deepfake of a real person: generated video or a cloned voice of someone the victim knows, like the faked chief financial officer and colleagues behind a $25.6 million loss in February 2024, or the cloned chief executive voice that May. Synthetic identity: a person who does not exist, with generated profiles and interview answers, used to get hired into the company. How to use it: ask whether AI wrote the words, faked a real person, or invented a person.

What you'll learn

Aligned to

CompTIA Security+
2.2 Explain common threat vectors and attack surfaces.
5.6 Given a scenario, implement security awareness practices.

Key terms

AI-Based Social Engineering
The use of artificial intelligence technologies to craft, automate, or enhance social engineering attacks, such as generating convincing phishing messages or deepfake audio and video.
Large Language Model
LLM
An AI system trained on vast amounts of text data to generate and analyze human-like language, used by attackers to craft convincing phishing messages and fake personas.
Deepfake
AI-generated synthetic audio or video that realistically impersonates a real person, used in social engineering attacks to deceive victims into transferring funds or sensitive information.
Synthetic Identity Infiltration
The use of AI-generated personas, profiles, and credentials to fraudulently impersonate a job candidate or trusted individual in order to gain access to an organization.

Topics

Ai Based Social Engineering Large Language Model Deepfake Synthetic Identity Infiltration Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →