Introduction
Artificial intelligence is reshaping the cybercrime landscape in 2025, and small and medium businesses (SMBs) are now prime targets for sophisticated, AI-enabled phishing and credential theft.
In This Article
The Transformation of Phishing Attacks
AI-powered phishing attacks have surged by 703% in 2025, leveraging generative AI for emails, voice calls, and videos that make malicious communications nearly indistinguishable from legitimate ones (SlashNext - Opens in new window). Recent monitoring saw the total number of threats targeting SMBs jump from 48,749 in June 2024 to over 13.3 million by June 2025—a 27,000% increase (N-able - Opens in new window). Sixty percent of recipients fall victim to GenAI-driven phishing attacks, nearly matching traditional attack numbers (Harvard Business Review - Opens in new window). In 9 out of 10 confirmed web app breaches, credential abuse was the main technique—a sign that SMBs must pay close attention to password management and phishing defense (N-able - Opens in new window).
Beyond Email: New Vectors and Risks
AI’s impact goes well beyond email:
- Deepfake audio “vishing” scams are accelerating; attackers use voice cloning to impersonate leaders or finance staff in real time.
- QR code phishing (“quishing”) surged to 51% of observed phishing incidents in September 2023 and remains a persistent risk in 2025 (ReliaQuest - Opens in new window). Most such attacks target login credentials and remote access to corporate email, cloud, and SaaS platforms.
- Adaptive malware and smarter chatbots further refine attack strategies, learning from past defense attempts and changing tactics quickly.
Credential Attacks: The Weakest Link
Stolen credentials provide a gateway to ransomware and data theft. 61% of all data breaches in 2025 were due to compromised credentials; weak or reused passwords are common points of entry (SQ Magazine - Opens in new window). 82% of ransomware victims are businesses with fewer than 1,000 employees (Coveware - Opens in new window), and 43% of all cyberattacks now specifically target small businesses (Forbes - Opens in new window). Multi-cloud adoption and poor MFA configuration were critical challenges cited by CISA and N-able’s annual reports.
How SMBs Can Spot Modern AI-Powered Threats
Attackers employ the following patterns:
- High-volume, context-rich text that mimics personalized work communications.
- QR code attachments or links in emails, often disguised in PDFs and JPEGs to bypass email filters.
- Urgent requests and impersonation of internal staff using voice or email, as confirmed by recent incident reviews.
Strategies for Defense
SMBs should:
- Upgrade email security to leverage behavioral AI and anomaly detection, not just simple filters.
- Conduct regular phishing simulations; this has been shown to improve threat detection rates by 31% (SQ Magazine - Opens in new window).
- Implement phishing-resistant multi-factor authentication (PDF) - Opens in new window (like FIDO/WebAuthn or passkeys), as CISA now recommends.
- Monitor for unusual login attempts and credential abuse on cloud platforms.
- Train staff to recognize and report QR code phishing and deepfake vishing attempts, with up-to-date examples in training modules.
Conclusion: The Value of Partnering with a Managed Services Provider (MSP)
AI represents both the biggest challenge and the greatest opportunity in cybersecurity today. As attackers rapidly innovate, small businesses must use the same technologies—smart alerting, proactive scanning, and targeted response plans—to stay protected. The right balance is essential: avoid being overwhelmed by data, and home in on the most urgent risks first.
For Midwest and Florida SMBs seeking a trusted partner in cybersecurity and IT, ExcalTech offers a holistic suite of services designed to keep businesses safe and efficient. ExcalTech provides proactive monitoring, multi-layered cybersecurity, data center and cloud solutions, managed backup/disaster recovery, help desk support, hardware procurement, and expert project management—all tailored for the unique needs of SMBs.
Our Illinois- and Florida-based support teams are renowned for rapid response times (15-second average call pickup, 30-minute SLA), and our managed services clients have had zero major security incidents in over 6 years—a testament to our comprehensive defense strategies. By partnering with a local, experienced provider like ExcalTech, SMBs gain the expertise and peace of mind necessary to thrive in an era of escalating cyber threats.
Learn more about IT services with ExcalTech or click the button below to speak directly with a member of our team.