The social engineering threat landscape is rapidly evolving, with cybercriminals adopting advanced technologies to enhance their deceptive tactics. This talk examines the shift from traditional phishing methods to sophisticated attacks leveraging AI-driven voice and video deepfakes. We’ll explore real-world incidents like the Wiz CEO impersonation and the exploitation of fake identities, such as the hiring of North Korean workers under false pretenses. Additionally, we’ll discuss the recent MGM Resorts breach by the Scattered Spider group to highlight how phishing strategies are becoming more targeted and complex, even without the use of deepfakes. Participants will learn how easily these attacks can be orchestrated using accessible tools like vapi and will evaluate the effectiveness of current phishing simulations based on the latest research.