The construction industry is no stranger to the transformative potential of artificial intelligence (AI). From optimizing workflows to ensuring safety, AI has cemented its role as an indispensable asset. However, it’s a double-edged sword. The same technology that streamlines our operations is paving the way for cybercriminals to orchestrate sophisticated email scams.
–

The onset of 2023 was a reminder of this paradox, with an unprecedented surge in the level of deceit detected within corporate inboxes. A significant 25% of all emails were flagged as potential threats, and the lion’s share of these was identified as impersonation attacks, a development that’s impossible to ignore.
–
Cyber fraudsters appear to be capitalizing on AI advancements to create convincing emails that can deceive even the most cautious reader. It’s a stark departure from the poorly crafted scams of old, known for their grammatical faux pas and spelling blunders. AI is not just enhancing the fluency of these malicious messages but is also suspected of driving their multilingual expansion.
–
The rising trend of social engineering, a tactic that exploits human psychology to extract sensitive information or assets, adds another layer of complexity to this evolving cybersecurity landscape. This tactic has evolved from the outdated ‘Nigerian Prince’ scam to intricate strategies that are significantly harder to detect.
–
Such refined strategies have amplified the risk associated with business email compromise scams, especially for employees who handle fund transfers. These scams have nearly doubled recently, representing more than half of all social engineering incidents. Distressingly, the median loss from these attacks has increased exponentially to $50,000, presenting a substantial financial risk for construction companies.
–
Scammers are now leveraging residential Internet Protocol addresses to lend a local flavor to their intrusions, thereby bypassing security checks. The FBI’s Internet Crime Complaint Center processed an alarming 21,832 complaints related to business email compromise scams last year, leading to an astronomical total loss of over $2.7 billion.
–
Scammers traditionally impersonated high-ranking executives to swindle unsuspecting employees into initiating substantial financial transactions. However, they have broadened their horizons and are now targeting vendors associated with their intended victims. This not only makes their ploy seem authentic but may also leverage confidential insider information to add credibility.
–
Notably, the language barrier appears to be diminishing. While previously confined to English, scammers now employ a range of languages, such as French, Polish, German, Swedish, Dutch, and more, to execute their fraudulent activities. This shift suggests that generative AI could be playing a role in enhancing their grammatical sophistication and language translation capabilities.
In response to this evolving threat, cybersecurity experts emphasize the importance of security awareness training, especially within the construction sector. They advocate the implementation of advanced email security layers that can detect and respond to such threats. Machine learning algorithms, for example, can help identify unusual patterns and anomalies in emails, providing a crucial defense against these increasingly complex attacks.
–
As we navigate this intricate cybersecurity terrain, it’s clear that AI, with all its boons, brings significant challenges too. The key to safeguarding our operations in the construction sector lies in maintaining constant vigilance, updating our defensive strategies, and recognizing the full scope of AI’s capabilities – both constructive and destructive.

–