ISSN 2409-7616

Zufarova A.S.

INTEGRATION OF ARTIFICIAL INTELLIGENCE INTO AN EDUCATIONAL PHISHING ATTACK SIMULATOR

UDC 37.01:007

Zufarova A.S.1 (Khabarovsk, Russian Federation) – 006694@pnu.edu.ru

1Pacific State University

Abstract. Information technology is rapidly developing, giving rise to new types of threats, among which phishing attacks occupy a special place. Today, the issue of information security is becoming a priority for organizations of various sizes. One of the most dangerous forms of cybercrime is phishing, which is a massive social engineering campaign aimed at stealing personal data and funds. Within the framework of this scientific work, the main focus is on the development of training methods for employees to combat phishing. One of the most effective ways to raise staff awareness is the Phishing Box platform, designed to conduct realistic training and tests. This tool reproduces real-world conditions, helping employees get acquainted with modern techniques of intruders and develop skills in detecting suspicious messages. A special feature of our work is the development of an automated tool for preparing educational materials, such as phishing email samples. Since training should cover a wide range of situations, an extensive library of training tasks is needed. Therefore, there is a need to create significant amounts of high-quality educational content. Artificial intelligence solves this problem, and our article focuses on the capabilities of domestic neural networks such as GigaChat and YandexGPT5Pro. We will demonstrate how these neural networks help create realistic emails that mimic common phishing schemes. This approach allows you to develop a variety of training scenarios, making employee training more effective and interesting. We will discuss the results of our experiments and show how the resulting content is integrated into training courses on the Phishing Box platform. It is important to emphasize that employee training is an essential factor in phishing prevention. It helps not only to reduce risks, but also forms a corporate culture of safe work with digital resources. Thus, the introduction of artificial intelligence technologies in personnel training significantly strengthens the protective boundaries of organizations in the modern digital space.

Keywords: artificial intelligence, GIGA CHAT, YandexGPT5Pro, neural network, information security, phishing emails, social engineering.

References:

  1. Drugach Yu.S. Controlled hacking. The Bible of Social Engineering. revised. and additional. St. Petersburg, BHV-Petersburg Publ., 2024. 208 p. (In Russian).
  2. Prokhorov A.I., Markin E.A., Nikeeva U.G. Phishing attacks: the main types and methods of protection against them.  Proc. “Information systems, economics and management. Scientific notes”. Rostov-on-Don, Rostov State University of Economics Publ., 2023. pp. 84-90. (In Russian). URL: https://www.elibrary.ru/mzgipc
  3. Direev I. D. Social engineering in the context of information security. International Scientific Research Journal, 2025, no. 3 (153). (In Russian). URL: https://www.elibrary.ru/apzmdr
  4. Russian E.I. The past, present and future of phishing attacks. Scientific aspect, 2024, vol. 47, no. 6, pp. 6015-6022. (In Russian). URL: https://www.elibrary.ru/bfgqil
  5. Kurennaya V.O. Phishing and vishing in information security. StudNet, 2022, vol. 5, no. 6, pp. 218-219. (In Russian). URL: https://www.elibrary.ru/xwtnvu
  6. Zakharova A.A. Methods of personnel training in the organization. Alley of Science, 2022, vol. 1, no. 3 (66), pp. 114-120. (In Russian). URL: https://www.elibrary.ru/acjlnb
  7. Bogdanova T.M. Improving employee security through phishing attack training. Moscow, RAS Publ., 2019. 153 p.
  8. Vasiliev V.I. Artificial intelligence: a history in faces. Moscow, Mechanical engineering Publ., 2015. 111 p. (In Russian).
  9. Gibadullin A.A. Myths and legends of artificial intelligence, the mythology of artificial intelligence. Academic journalism, 2024, no. 1-1, pp. 553-556. (In Russian). URL: https://elibrary.ru/hhguup
  10. Pipiya L.K., Dorogokupets V.S. Artificial intelligence and education. Science abroad, 2024, no. 123, pp. 1-68. (In Russian). URL: https://elibrary.ru/hcewbv
  11. Zufarova A.S., Samoilov A.V., Mulyavka M.R. The path of artificial intelligence: from computer games to the means of cognitive development of students ChatGPT. Education management: theory and practice, 2023, no. 7 (65), pp. 76-90. (In Russian). URL: https://elibrary.ru/owmfgn  
  12. Shevchenko A.V., Averkin A.N. Protection of artificial intelligence and explicable artificial intelligence from adversarial attacks. Soft measurements and calculations, 2024, vol. 85, no. 12, pp. 103-113. (In Russian). URL: https://elibrary.ru/fnvmzf
  13. Pikalov P.A. Cyberbullying using artificial intelligence. Current issues in the fight against crime, 2024, no. 2, pp. 56-59. (In Russian). URL: https://elibrary.ru/dqklru  
  14. Allanurova O., Shokhradova J. Digital security and innovative approaches to data protection. Symbol of Science: International scientific journal, 2024, vol. 2, no. 12-1, pp. 67-68. (In Russian). URL: https://elibrary.ru/pbeigv
  15. Bimoldina J.A. How artificial intelligence changes the rules of the game in cybersecurity. Forum. Series: The role of science and education in the modern information society, 2024, no.  S2(32), pp. 235-240. (In Russian). URL:  https://elibrary.ru/vwoyqd
  16. Malenkov M.G. Protection from attacks using AI with the help of AI. Innovations, Science. Education, 2021, vol. 2, no. 44, pp. 49-53. (In Russian). URL: https://elibrary.ru/hhcflr

For citation: Zufarova A.S. Integration of artificial intelligence into an educational phishing attack simulator. CITISE, 2025, no. 2, pp. 593-603.