BEC Combating AI-powered BEC attacks We’ve trained our security solution to detect BEC emails generated by large language models. Roman Dedenok July 13, 2026 It’s no secret that cybercriminals have recently been leveraging large language models to optimize their operations. As a result, numerous phishing and malware campaigns targeting organizations have significantly improved in quality. These emails now contain fewer obvious errors, and their tone closely mimics legitimate business correspondence. But the methods of deploying these campaigns always have a clear giveaway: an attempt to steal credentials or execute malicious code. Business email compromise (BEC) attacks, however, present a greater challenge. BEC attacks typically rely entirely on social engineering, effectively tricking a legitimate employee into carrying out the attackers’ requests. These attacks have also improved substantially in quality since the advent of LLMs. If the scammers’ tactics succeed — say, if they manage to convince an employee to transfer funds to a third-party account instead of a contractor’s — the company can lose substantial amounts of money in an instant. This is why we’ve developed a specialized technology to detect AI-generated BEC emails. An example of an LLM-generated BEC email How our AI-generated BEC detection technology works Without getting bogged down in the technical details, here’s an explanation of how this new technology operates. As you may know, large language models don’t compose text the way humans do. Instead, they predict words that are most likely to fit the task outlined in the prompt. Furthermore, cybercriminals tend to take the path of least resistance: instead of reinventing the wheel, they rely on the most widely available AI models. Because it’s obvious what the attackers are after, we can extract BEC-specific key phrases from the text. Additionally, we’ve learned to spot when a text has been generated by a machine. These indicators are a cornerstone of our detection technology. As a result, our security solution can now identify and block attempted BEC attacks at the initial stage — before the attacker ever has a chance to mislead an employee. The technology currently detects AI-generated BEC emails in English, French, German, Italian, Portuguese, Russian, Spanish, and Turkish. Which of our solutions feature the AI-generated BEC detection technology? Our range of corporate security solutions includes Kaspersky Security for Mail Server, which incorporates Kaspersky Secure Mail Gateway – where our AI BEC detection technology is implemented. To be precise, the feature is available in the KSMS Plus license following the recent KSMG 3.1 update. Visit the Kaspersky Security for Mail Server official page to learn more about our email security solutions and the features added in the latest update.
Read next Meta vs. privacy: smart glasses take it a step too far How Meta plans to implement the NameTag facial recognition feature in its smart glasses, and why it’s already sparking outrage.
Tips Five reasons to switch to ZTNA and zero trust: why companies have outgrown VPN How VPN attacks, growing infrastructure complexity, and regulatory requirements are all accelerating businesses’ shift to Zero Trust Network Access.
Tips Reading between the lines: how to read e-books safely We break down how to use e-books safely, and which rules to follow when searching for books online, so you don’t fall victim to scammers
Tips The eMudhra certificate incident: how organizations can respond How a certificate’s private key ended up being equal to 4, and why browser updates alone won’t protect you from vulnerable eMudhra certificates.
Tips How to improve your resume with AI without exposing your data Let’s look at how to use AI as a resume editor without oversharing to build a document that gets past automated screening systems and catches a recruiter’s eye.