Artificial Intelligence (AI) is transforming the way we live, work, and communicate. It enables innovation, improves productivity, and helps solve complex problems across different sectors. However, the same technology is also being misused by threat actors to create more advanced and convincing cyber threats. AI is making digital threats more difficult to identify because attackers can now create highly realistic emails, messages, audio, videos, and websites. Traditional warning signs, such as poor grammar, unusual formatting, or obvious mistakes, may no longer be reliable indicators. Verification and responsible digital practices have become more important than ever. AI tools and smart devices we use every day can introduce new privacy and security risks if they are not used carefully. Sharing personal or confidential information with untrusted AI applications, granting unnecessary permissions, or relying on AI generated information without verification may expose individuals and organizations to security risks. “AI Cyber Awareness” By Indian Computer Emergency Response Team (CERTIn) is designed for everyday citizens, employees, and digital users, not only cybersecurity professionals. It explains how AI is changing the digital threat landscape and provides simple, practical steps that everyone can follow to protect personal information, devices, and online identity. AI - Enhanced Phishing & Social Engineering How it Works ? Threat actors now send emails and texts that look real and error free. They use details about you, such as your job, services you use, or recent activities, to make messages feel personal. Since these messages are well written, they can be much harder to spot. How to Identify ? The message feels highly specific to you but arrives unexpectedly. It uses an urgent or threatening tone and demands immediate action. It asks you to click a link, verify an account, reset a password, or make a payment. The sender’s address looks almost right, but not quite. How to Stay Safe ? Do not click links in unsolicited messages. Go directly to the official website or app instead. Verify requests through a separate, trusted contact channel, such as an official phone number or app. Never enter credentials or OTPs on a page reached through a message link. Report and delete suspicious messages, then block the sender. Voice & Video Deepfakes (Vishing) How it Works ? Threat actors can clone voices or create fake videos that look and sound real. They may pose as family, colleagues, or officials to pressure you into sharing sensitive information, sending money, or acting quickly. How to Identify ? Unusual urgency, panic, or requests for secrecy, such as don’t tell anyone. A slightly off tone, pacing, background noise, or audio quality. Requests to bypass normal verification or approval processes. Requests for payment via gift cards, cryptocurrency, or wire transfer. How to Stay Safe ? Hang up and call the person back using their known, saved number. Set a family or workplace safe word to verify identity in emergencies. Never authorize payments based on a call or video alone. Confirm in writing through a separate channel. Pause before reacting. Threat actors rely on panic to cloud your judgment. AI-Assisted Malware & Automated Attacks How it Works ? Threat actors use AI tools to create or hide malicious code, test stolen passwords across multiple sites, and identify systems that need updates. This makes attacks faster and more widespread. How to Identify ? Unexpected login alerts, password reset emails, or MFA prompts you didn't request. Unfamiliar devices or sessions listed in your account activity. Antivirus warnings, pop-ups, or unusually slow device performance. Files, settings, or browser extensions you don't recognize. How to Stay Safe ? Use a unique, strong password for every account. Enable multi factor authentication (MFA) on all important accounts. Keep antivirus software, systems, and apps up to date. Act immediately on unexpected login or MFA alerts. Fake Websites & Identity Theft How It Works ? Threat actors can create look alike websites and chatbots that appear genuine, such as banking or shopping portals, to steal your login credentials, OTPs, or payment details. They may also use fake photos or documents to create false identities. How to Identify ? Slightly altered website URLs, such as extra letters, hyphens, or a different domain ending. Chatbots or agents asking for OTPs, PINs, or full card numbers. Missing HTTPS or unusual design inconsistencies on a familiar site. How to Stay Safe ? Always type official URLs directly or use verified bookmarks, rather than clicking links. Never share OTPs, PINs, or full card details with any chatbot or "support agent". Check for HTTPS and look closely at the domain name before logging in anywhere. Monitor your bank statements and credit report regularly for unfamiliar activity. For reporting Cyber Security Incidents to CERT-In: Visit website: https://www.cert-in.org.in Email: incident@cert-in.org.in Toll Free Phone: +91-1800-11-4949 Toll Free Fax: +91-1800-11-6969 Information Desk Phone: +91-11-22902657 Source: AI Cyber Awareness booklet by Indian Computer Emergency Response Team