AI-Driven Spear Phishing Attacks on the Rise

Hackers are increasingly using AI to launch massive-scale attacks, with email emerging as a primary target. AI can quickly aggregate personal information—such as information about coworkers, active projects, and recent travel itineraries—allowing bad actors to instantly craft convincing messages that look authentic.

AegisAI's AI-Powered Solution

Last year, former Google security executives Cy Khormaee and Ryan Luo launched AegisAI, a startup that uses AI agents to stomp out these threats, known as spear phishing. With a decade of experience preventing email hacks, the co-founders developed AI agents that quickly analyze each message as a human would, paying attention to small anomalies that even the most elaborate checklist wouldn’t catch.

Adoption and Funding

Less than a year after its launch, AegisAI says its tech has been adopted by dozens of customers, including crypto payments company Mash, AI startup LangChain, and Google-owned privacy compliance platform Lokker. That demand has just helped AegisAI raise a $36 million Series A led by Battery Ventures, with participation from existing backers Accel and Foundation Capital. The fresh funding brings the startup’s total capital to $49 million.

“AI-powered attacks bypass existing controls more than half the time now, which means they're almost twice as effective as they used to be,” Khormaee told TechCrunch. “They’ve researched you, they understand everything about you, and they're targeting attacks that are perfectly bespoke to you.”

AegisAI's Agent-Based Approach

Khormaee claims that AegisAI's agents can spot threats traditional email security systems may miss entirely. For instance, the startup’s AI can catch malicious PDF attachments that look legitimate at first, including ones with built-in passwords and CAPTCHAs, which are often used to fool standard spam filters.

• AegisAI's AI agents analyze each message, paying attention to small anomalies that even the most elaborate checklist wouldn’t catch.

Competition and Future Plans

AegisAI isn’t the only startup using AI to analyze the context of every incoming email to detect fraud and impersonation attempts. Lightspeed-backed Ocean is also trying to displace established vendors like Proofpoint and Mimecast, along with newer players like Abnormal Security. However, given that AegisAI is led by experts who helped secure Gmail, Thakker believes the startup has the best shot at becoming the leading new hack-prevention company.

Expansion Plans

While AegisAI is starting with email, the startup has its sights on eventually expanding to other areas of defense, such as data security. “The core idea of building customized, highly advanced agents that can do investigations is going to [determine] who becomes the next dominant security company,” Khormaee said.