{"slug": "your-sent-items-folder-is-a-phishing-kit-now", "title": "Your Sent Items Folder Is a Phishing Kit Now", "summary": "A developer warns that AI-generated phishing emails, trained on leaked mail and public writing, can now flawlessly imitate coworkers and vendors, rendering traditional content-based detection useless. The post recommends phishing-resistant MFA, out-of-band verification policies, DMARC enforcement, and behavioral detection over content inspection to counter this threat.", "body_md": "The most convincing phishing email your finance team gets this year won't have a single typo. It will quote a real thread, match the sender's sign-off, and reference a project only your company knows about. That's the whole trick now, and it's getting cheaper by the month.\n\nThe pipeline is simple. Public writing (blogs, LinkedIn, conference talks) is the floor. Mail leaked in old breaches is the ceiling. Best case for the attacker: a live compromised mailbox, which hands over full threads, real signatures, current projects, and the back-and-forth rhythm between two people who actually know each other. Feed that to a GPT-class model and you get a clone that imitates coworkers, vendors, execs, your help desk. Drop the lure into an existing reply chain and it inherits the trust of every legit message above it.\n\nHere's the kind of payload that produces, from one walkthrough of this technique:\n\n\"Hey, I need you to review this document before the meeting. Let me know once you've opened it.\"\n\nRead that as a detection problem. No urgency theatrics. No grammar slip. Every signal your users were trained to key on is absent by design.\n\nFor twenty years we taught people that bad writing equals phishing. That heuristic now tells them clean writing means safe writing, which is exactly backwards. Awareness guidance still listing \"awkward tone\" and \"generic greetings\" as indicators inverts against a model trained on the sender's own corpus. The fake can have better context and cleaner grammar than the real mail sitting next to it in the inbox.\n\nThe pivot: stop asking \"Does this look fake?\" and start asking \"Is this request unusual?\" Grade people on what they do with bank detail changes, credential resets, MFA enrollments, gift card asks. There won't be a comma splice to catch. Train the decision, not the eyeball.\n\nOne filter for every control you buy or build from here on: does it work when the message content is flawless? If it reads prose, it fails. If it watches behavior or binds to something the attacker can't fake, it holds.\n\n**Phishing-resistant MFA.** Lookalike domains proxy real login pages, and OTP codes and push approvals relay right through. FIDO2 keys and passkeys bind the credential to the origin, so a proxied page gets nothing replayable. Finance, payroll, execs, IT admins first. Stuck on push? Number matching is the floor, not the goal.\n\n**Out-of-band verification as policy, not suggestion.** People route around advice when they're busy. Scope it tight and enforce it:\n\n```\nVerify via contact info you already hold, never from the message:\n- New or changed bank details, any amount\n- Wire/ACH above $5,000 (dual approval above $25,000)\n- Password resets, MFA changes, mailbox delegation\n  for finance and exec staff\n- Gift cards. Any amount. Any requester. Including the CEO.\n```\n\n**DMARC at p=reject, with honest limits.** If you're at `p=none`\n\n, you're monitoring, not defending. But DMARC only stops exact-domain spoofing. It does nothing about lookalike domains or a genuinely compromised partner account. Leadership thinks the DNS record fixed BEC. It didn't.\n\n**Behavioral detection over content inspection.** Stop paying the detection budget to read prose. Watch what accounts do. This Microsoft 365 Defender query catches external senders impersonating internal display names:\n\n``` js\nlet InternalNames =\n    IdentityInfo\n    | where Timestamp > ago(14d)\n    | summarize by AccountDisplayName;\nEmailEvents\n| where Timestamp > ago(7d)\n| where SenderFromDomain != \"yourdomain.com\"\n| where SenderDisplayName in~ (InternalNames)\n| project Timestamp, SenderFromAddress, SenderDisplayName, Subject, RecipientEmailAddress\n```\n\nAdd hunts for new inbox forwarding rules, first-time sender/recipient pairs, and reply-to mismatches. None of these fire because of what the email says. They fire because of what the account does. That's the property you want when the writing is perfect.\n\n\"But my queue is still commodity junk.\" Sure, and reply-chain attacks from compromised mailboxes already happen today with zero AI involved. The model just cuts the attacker's time per target. Every control above pays off against the plain BEC hitting you this quarter, so you're closing gaps you're already being billed for.\n\nHonest question for the comments: has your org actually drilled out-of-band verification for a bank-detail change, or is it still a paragraph in a policy doc nobody has tested?\n\nLonger writeup if you want the full argument: [https://axeploit.com/blog/your-sent-items-folder-is-a-phishing-kit-now](https://axeploit.com/blog/your-sent-items-folder-is-a-phishing-kit-now)", "url": "https://wpnews.pro/news/your-sent-items-folder-is-a-phishing-kit-now", "canonical_source": "https://dev.to/secbyjasonmiller/your-sent-items-folder-is-a-phishing-kit-now-2bik", "published_at": "2026-08-29 15:50:17+00:00", "updated_at": "2026-08-29 16:19:04.667358+00:00", "lang": "en", "topics": ["ai-safety", "ai-tools", "ai-policy"], "entities": ["Microsoft 365 Defender", "FIDO2", "DMARC"], "alternates": {"html": "https://wpnews.pro/news/your-sent-items-folder-is-a-phishing-kit-now", "markdown": "https://wpnews.pro/news/your-sent-items-folder-is-a-phishing-kit-now.md", "text": "https://wpnews.pro/news/your-sent-items-folder-is-a-phishing-kit-now.txt", "jsonld": "https://wpnews.pro/news/your-sent-items-folder-is-a-phishing-kit-now.jsonld"}}