Cross: AI-powered targeted spear phishing is occurring and will increase
David Cross · 10 - Investing in Early-Stage Cybersecurity and Enterprise Software Startups with Rain Capital Partner David Cross · Dec 10, 2024 · at 5:40
David Cross, Venture Partner at Rain Capital, outlines how threat actors currently deploy AI for spear phishing.
0:00 / 0:17exact quote · 17.5s
720p mp4 · rendered on demand · StarZero watermark
“AI, is they're collecting data and public and public information to do very targeted spear phishing, right? And email and things like that. And that is occurring. And it's, or we say that it's very clear that AI is helping those attackers in those cases. So I think that's something that we're going to see more of.”
quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →
More from David Cross
David Cross: Founders should send pitch decks upfront instead of teasing calls
“For me personally, is an element is like, you send me the deck as the pre-read opening versus get on a call, right, is I say, be proactive. If you really have something that good, and you'll send me the deck right up front, and it's that good, I'm going to wan…”
Cross: Seed VCs and founders should pursue fast $20M-$50M exits over unicorns
“I think there's a ton of opportunities that you think about of smaller companies, that 20 to fifty million dollar is that some people call it the aqua hire, but right, it's like a founder can come in, your founders can come in, in 18 months, take a couple mill…”
Cross: No evidence yet of adversaries using AI for complex attacks
“We haven't seen really any, I say evidence, right? Or of cases that are occurring now where that they're using AI to do very complex or compound attacks and surveys. We haven't seen that yet.”
Cross: Adversaries will eventually use AI to find zero-days in code
“Is that saying that we're going to use AI to find zero days in source code? We just haven't seen quite the evidence of yet, but we should still be very suspect that it will occur in the future.”
Cross: Ransomware is shifting from encryption to data extortion
“Ransomware now is not going so much after encrypting everything. It's more of a great grab the data, breach, pull it out, and then hold it for extortion, right?”
Cross: Founders often get trapped keeping early executives who cannot scale
“You may hire someone at the very start when five people, they're the chief marketing officer, but now you're 200 people. Are they really still ready to be the chief marketing officer for that next stage? And it's hard sometimes as founders, it's hard as early,…”