book

Deceptive Intelligence : AI, Social Engineering, and Securing the Human Element

Name: Deceptive Intelligence : AI, Social Engineering, and Securing the Human Element
Author: Sean Oriyano
ISBN: 9798868821776

by Sean Oriyano

May 2026

Intermediate

773 pages

21h 32m

English

Apress

Read now

Unlock full access

Deceptive Intelligence
Table of Contents
About the Author
About the Technical Reviewer
1. The Machines Learn to Trick Us
Redefining Social Engineering with AIHow AI Has Transformed Target ProfilingDeepfake Technology: Visual DeceptionAdaptive Phishing: The New Face of DeceptionEmerging Trends and the Growing ThreatThe Arms Race Between Attackers and DefendersHow Automation Changes Attack StrategiesAI and Human DeceptionThe Ethics of AI in Human DeceptionInnovation vs. Threats: The Balancing ActFuture TrendsSummary
2. From Confidence Tricks to Code
Classic “Con Artistry” EvolvedThe New Era of DeceptionThe Unstoppable Evolution of AI-Driven ScamsInfluence, Persuasion, and the Shift to Digital PlatformsExploiting Temporal VulnerabilitiesVisual Manipulation and Subliminal Influence in Digital MediaThe Future of Psychological Exploitation: A Case StudyAI’s Role in Reinventing Traditional AttacksIncorporating AI-Driven Scenarios in PentestingBuilding AI-Enhanced Phishing and Pretexting SimulationsAI-Powered Phishing with SET and LLM IntegrationAI-Augmented Voice Pretexting and Deepfake VishingTemporal Exploitation: AI-Timed Social EngineeringLaunching a Timed AI Phishing AttackMass Deployment and API Integrations for AI-Driven Social Engineering AttacksAI-Generated Phishing with Mail Merge and SETAutomating Deepfake Vishing Calls at ScaleIdentifying Target Work Hours for Maximum SuccessDeploying AI-Powered Phishing at Peak Cognitive VulnerabilityAI-Powered Chatbots for Real-Time Social EngineeringAI-Driven Behavior Tracking for Dynamic Attack AdaptationCollect Data from Phishing CampaignsAnalyze Email Responses for Sentiment and UrgencyDeploy AI to Optimize Phishing EmailsImplement Reinforcement Learning for Attack OptimizationDynamic Chatbot Adaptation Using AI ResponsesLearning from Past Tactics in a Modern ContextConducting Gap Analysis: Where Humans Are Still VulnerableIdentifying High-Risk Roles and IndividualsIdentifying Cognitive and Psychological Weak PointsSummary
3. Why We Fall for It
Psychological Foundations of Social EngineeringCognitive Biases: The Foundation of Successful DeceptionThe Power of Perceived LegitimacyThe Power of Recent ExperienceReinforcing Existing BeliefsThe Power of Small StepsThe Illusion of Personal ImmunityEmotional Hooks: The Accelerants of DeceptionBypassing Critical ThinkingThe Irresistible LureThe Power of Perceived ConsensusBridging Theory to PracticeDemonstration: Generating Manipulative Messages with AIStep 1: Environment Setup in Kali LinuxStep 2: Installing and Configuring AI for Email GenerationStep 3: Extracting Target Information via OSINTStep 4: Generating AI-Powered Phishing EmailsStep 5: Deploying the Phishing Simulation via GophishStep 6: Temporal Targeting for Maximum ImpactDemonstration: Voice DeepfakesStep 1: Gathering Voice Samples Using OSINTStep 2: Cloning the Voice Using AI ModelsStep 3: Enhancing the Realism of the Deepfake VoiceStep 4: Using the Deepfake for Social Engineering AttacksDemonstration: Automating Fake Social Proof on Social MediaStep 1: Use Social Mapper for Data CollectionStep 2: Extract Public Social Media DataDemonstration: Performing Sentiment Analysis for Attack OptimizationDemonstration: Leveraging Social Proof with AI for Targeted AttacksStep 1: Analyze Social Mapper Results for Attack VectorsStep 2: Identify Key Influencers and Trust RelationshipsStep 3: Generate AI-Driven Targeted ContentStep 4: Create Group Influence CascadeStep 5: Deploy a Coordinated Multi-channel AttackMitigationSummary
4. Spying with Smarter Eyes
The AI Takeover of OSINTDemonstration: Human-Based IntelligenceAI-Enhanced Identity Correlation and Target ProfilingDemonstration: AI-Driven Identity MappingAutomating Data Collection for EfficiencyDemonstration: AI-Powered Data Extraction from Leaked DocumentsTools for Advanced Data Analysis in OSINTDemonstration: Creating Target-Centric Knowledge Graphs with Neo4jTemporal Intelligence AnalysisDemonstration: Timeline Analysis with HarpoonSummary
5. Algorithms That Know You
User FingerprintingDemonstration: Cluster ProfilingExploiting Psychological ContradictionsDemonstration: Contradiction MappingDynamic Psychological Profiling: Forecasting Cognitive DriftDemonstration: Predictive Engagement Forecast (Harpoon + Orange3 Time Series)De-anonymizing Through Writing PatternsDemonstration: De-anonymization via Signature ExtractionSimulated Behavior SpoofingDemonstration: Simulated Behavior Spoofing with Profile-Driven Text SynthesisExploiting the Involuntary SelfSummary
6. Words That Work Like Magic
NLP’s Role in Creating Convincing MessagesLanguage Models and Their Capabilities (GPT, Transformers, etc.)Generating Text That Mimics Real Human Language PatternsUnderstanding Context and ToneDemonstration: Message Generation Using Hugging Face SpacesDemonstration: Message Variation via Parrot NLP in Google ColabSentiment Analysis in Tailored Social EngineeringAdapting Message Tone to Elicit Desired Emotional ResponsesDemonstration: Emotionally Tuned Message Generation Using LM Studio with a Local LLaMA2-Based ModelDemonstration: Refining Message Variants Using Performance Feedback in Parrot NLP (Google Colab)Automating Phishing with AI ModelsManaging the LifecycleDisrupting AI-Generated ContentIdentifying Telltale Signs of NLP-Based AttacksAutomation Tools for Detecting Generated TextA Word About Automated DetectionSummary

7. Faces and Voices That Aren’t Real
The Architecture of Synthetic MediaVoice Cloning Mechanics and DeepfakesSimulated Authority and DeepfakesTactical Deepfake Use CasesNatural Language Generation IntegrationDelivery InfrastructureEngineering the Lie: Ethics, Boundaries, and Real-World SimulationLaws and RegulationsPolicy and Legal ConstraintsTrust Disintegrated: Defensive Posture in the Age of Synthetic IdentityTechnical Detection Methods and LimitationsBehavior-Based AI MonitoringProcedural DefensesSimulation-Based Training and VerificationSummary
8. Mining the Gold in Your Online Life
Social Media as a Target for OSINTExploring Social Media BreadcrumbsDemonstration: Predictive Behavior Mapping from Post Cadence and MetadataAI Tools for Scraping and Analyzing ProfilesBehavioral Tracking and UnderstandingDemonstration: Detecting Personal Narrative Across Multiple PlatformsSimulating Social Media ExploitationA Closer LookDemonstration: Building Synthetic Peer NetworksMitigating the Risks of Data OverexposureMicro LeaksPattern OverlapsThird-Party ReflectionsOperational Layers of DefenseDemonstration: Reverse Exposure Modeling Using Public Shadow ReferencesSummary
9. Phishing Smarter, Not Harder
The Evolution of AI-Driven Phishing CampaignsA Closer LookBeyond One-Off EmailsTarget-State-Aware PhishingFeedback-Informed CampaigningAutomating Smishing and Vishing SimulationsAbout Deception ChainsThe Critical ComponentsCross-Channel Phishing State Machines: Real-Time OrchestrationSmishing Payloads with Embedded Environmental HooksVoice Timing and Coordinated Semantic DriftAI Under the Hood: Why This WorksPhishing DefensesPhishing Graph ModelingKill Chain-Based SimulationsBehavioral Response CaptureDemonstration: AI-Constructed Phishing Graphs with Kill Chain EvaluationBringing Things TogetherInitial Deployment ArchitectureCross-Channel EscalationLateral Simulation and PropagationStrategic Implications and RiskGetting DefensiveSummary
10. The Chatbots That Never Sleep
Conversational Persistence: How Chatbots Anchor Trust Over TimeStructured Dialogue As a Manipulation SurfaceEscalation by Conversational FramingMulti-session State ModelingDemonstration: Deploying an Adaptive Phishing ChatbotEmbedding Chatbots in Trusted EcosystemsA Closer Look at Some AttacksWorkspace Bot Integration and Social Parity ExploitsCovert Behavioral Probing Through Interactive WidgetsEvent-Based Dormant Activation and Passive AnchoringDemonstration: Detecting a Cloned Chatbot in a Fake Helpdesk PortalSimulation, Detection, and Disruption of Adversarial BotsControlled Simulation in Live but Contained ChannelsConversation Drift Analysis and Linguistic Error ScoringTrap-Based Isolation and Non-interaction ProvocationDeactivation WorkflowSummary
11. Testing the Machines’ Tricks
Engineering Realistic AI-Driven Attack ScenariosTactical Framing of Objectives and ConstraintsMulti-vector Simulation PlanningExecuting Under ConstraintsEthical Barriers and Legal Realities in Simulated DeceptionPre-authorization and Organizational Buy-InOperational Barrier for AI-Based Threat EmulationMetrics That Matter: Quantifying Human and System WeaknessStrategic Reporting from Adversarial TelemetrySummary
12. Building Tools for a Human Weakness
Designing Tools for Social Engineering SimulationsConstructing Recursive Identity Frameworks (RIFs)State-Coordinated Behavioral Templating (SCBT)A Closer LookSimulation Fabric and Elastic PersonasDemonstration: Recursive Identity Stack with Distributed Interaction HistoryAI for Mimicking Human Behavior in PentestsModeling Behavioral Noise and Nonlinear Error PropagationStress-State Emulation and Temporal Interaction DriftEmergent Behavioral Mimicry in Unstructured EnvironmentsDemonstration: Context-Decaying Persona Operating Under Simulated FatigueAutomating Phishing, Smishing, and Bot InteractionsPractical ApplicationsPolychannel Orchestration via Transient Trust ModelsIn PracticeReal-Time Response Mutation and Adversarial RetargetingFine-Tuning for Realistic Scenarios in TestingCreating Controlled Degradation Models in Dialogue SystemsControlled Entropy Modulation: Professional-Grade Failure EngineeringMulti-threaded Embedding and Context Cross-PollinationSummary
13. The Human Element in an AI World
How AI Amplifies Psychological ManipulationThe MechanicsAttacks Based on Behavioral DataEthical Responsibility in Exposing Human FlawsIncorporating Human Vulnerabilities into Pentest SimulationsCreating Realistic Attack Scenarios That Exploit Trust and EmotionA Look at ImplementationPretext Development: Building Convincing StoriesGood and Bad StoriesReal-Time Pretext EvolutionModeling Conversation FlowModeling Authority FiguresMeasuring How Humans Respond Under PressureGetting Into DetailsIdentifying Weak Points in Organizational TrainingEvaluating Existing Awareness ProgramsDesigning Targeted Retraining for High-Risk GroupsLeveraging AI AnalyticsSummary
14. Fighting Fire with Fire
Synthetic Media and Communication VerificationReal-Time Deepfake Detection and AnalysisFaceForensics++ Neural Network PipelineDeepSafe Multi-model Detection PlatformWazuh Audio Fingerprinting and Acoustic Analysis ExtensionCross-Platform Attack CorrelationElastic Security Stack Multi-channel AggregationSecurity Onion Network-Level Campaign DetectionOSSIM Correlation Engine with Social Engineering DirectivesCryptographic Communication VerificationThe Authority Exploitation Problem: Executive Impersonation in Safety-Critical EnvironmentsCoordinated Cross-Platform DeceptionSynthetic Communications in Standard WorkflowsOut-of-Band Authentication SystemsThe Synthetic Authority Crisis: AI Manipulation of Emergency ProtocolsThe Credential Sharing Vulnerability: Synthetic Exploitation of Shared AccessThe Knowledge-Based Authentication Weakness: Synthetic Exploitation of Organizational InformationBehavioral Analytics and Manipulation PreventionThe Procedural Displacement Problem: Manipulation of Established WorkflowsThe Cognitive Exhaustion Exploitation Problem: Timing-Based Psychological VulnerabilityConversational Pattern and Intent AnalysisThe Conversational Manipulation Problem: When AI Learns Your PsychologySession Continuity Exploitation: AI's Perfect Memory ProblemAttack Timing Exploitation: AI's Precision Strike CapabilitiesBehavioral Trigger Disruption: Preventing AI SurveillancePrivacy Protection and Counter-ReconnaissanceIdentity Fragmentation and Privacy ControlsIdentity Fragmentation and Privacy Controls: Systematic Digital Identity CompartmentalizationReconnaissance Detection and Attribution: Identifying AI Intelligence Gathering OperationsIncident Response and Recovery Systems: Rapid Containment and Forensic AnalysisContinuous Security Improvement: Adaptive Defense Against Evolving AI ThreatsSummary
15. AI to Spot AI
Foundations of AI-Driven Attack DetectionMulti-modal Synthetic Content Detection ArchitectureOSINT Reconnaissance Pattern DetectionDemonstration: AI-Augmented Campaign Reconstruction from SpiderFoot OSINT with ChatGPTDemonstration: Automated Social Engineering Simulation and Decoy Profile GenerationDemonstration: Automated Malicious Domain and Lookalike Infrastructure DetectionDemonstration: Public Document Exposure Analysis and Risk SimulationAttack Vector–Specific Detection ModelsEnterprise Communication Authentication FrameworksSocial Media Surveillance Counter-IntelligencePersistent Threat Detection in Enterprise Messaging SystemsDefensive Integration and Operational ResponseReal-Time Threat Intelligence IntegrationOperational and Architectural GuidanceSummary
16. Picking Up the Pieces
Incident Response Strategies for AI-Enhanced AttacksPreparing IR Teams for AI-Specific ScenariosRapid Triage and ContainmentCommunication Protocols for Stakeholders and the PublicTracing and Analyzing Attack Vectors with AIForensic Analysis Tools for Digital TracesLeveraging AI to Identify Patterns of CompromiseWorking TogetherPost-incident Intelligence and Continuous ReadinessUsing Collected Data to Train Updated Detection ModelsRefining Threat Intelligence with AI InputsSummary
17. Playing by the Rules
Ethical Boundaries and Operational IntegrityCore Principles for AI-Based EngagementsBalancing Realism with ContainmentPrivacy, Compliance, and AI-Enhanced Incident ResponseMapping the Legal Landscape for AI OperationsData Handling Under Active AI Threat SimulationTransparency, Governance, and Accountability in AI TestingStakeholder Disclosure in the AI EraTranslating Machine-Driven Findings into Human DecisionsGovernance Frameworks for AI Penetration TestingImmutable Logging and Decision ForensicsSummary
18. Learning to Outsmart the Bots
Foundations of Adaptive Human TrainingRole-Specific Curriculum MappingRecognition HeuristicsDecision ProtocolsMotivation and AdherenceScenario Design and Feedback LoopsMicro-DrillsBraided ScenariosStress Inoculation and Retrieval PracticeEscalation Logic and ContainmentFeedback DesignSummary
19. What’s Next in AI Trickery?
Emerging AI Horizons and Adaptive Threat ModelsReal-Time Deepfakes, Live Translation, and BeyondAutonomous Agents and Self-Learning Attack ScriptsPotentials and Threats in Quantum Computing (Long-Term Outlook)Multi-modal Fusion of Deceptive ChannelsComing TogetherPentesting Evolution and Predictive Adversary SimulationUpdating Methodologies to Keep Pace with AI AdvancesPartnering with AI Researchers and AcademiaReinforcement Learning for Attack OptimizationAll Things ConsideredOrganizational Resilience and AI-Centric Security InfrastructureOver the Next Five YearsThe Next Ten?Summary
20. A Smarter Safer Tomorrow
Building AI-Powered Programs and Ethical Use of AIConsolidated Governance and ResponsibilitiesUnified Tools and TechniquesTransparency, Accountability, Privacy, and TrustRefining Workflows for Long-Term SecurityTeam Collaboration ModelProgram Metrics and BenchmarksTool Application PlaybookTool Evolution and Upstream CollaborationAdapting to Emerging ThreatsIntelligence Sharing RoadmapTraining RoadmapAutomation StrategyOrchestration As the Control LayerHuman Oversight As a SafeguardEvidence As a Product of AutomationObservability and Controlled AccessAutomation As CodeSummary
Index

Content preview from Deceptive Intelligence : AI, Social Engineering, and Securing the Human Element

S. OriyanoDeceptive Intelligence https://doi.org/10.1007/979-8-8688-2177-6_14

14. Fighting Fire with Fire

Sean Oriyano¹

The core mission of this chapter is clear: we’re not just analyzing AI-powered social engineering threats—we’re building the security controls to deal with them. This isn’t theoretical threat modeling or future planning. It’s a practical defense implementation for organizations already facing AI-generated attacks.

The title “Fighting Fire with Fire” reflects the real operational situation. When threat actors use voice cloning technology that can perfectly mimic your executives, your response can’t be limited to ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

The Human Factor in AI-Based Decision-Making

Publisher Resources

ISBN: 9798868821776Purchase Link Publisher Website

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Deceptive Intelligence : AI, Social Engineering, and Securing the Human Element

by Sean Oriyano

14. Fighting Fire with Fire

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.