Defenders apply AI to detect and respond to threats at scale, while attackers experiment with it to craft phishing lures, generate obfuscated code, and disguise malicious payloads. Microsoft Threat Intelligence recently detected and blocked a phishing campaign it believed used AI-generated code to hide its payload inside an SVG file. The SVG file included hidden elements made to look like a business dashboard, while a script inside it turned business related words into code that revealed a hidden payload. The researchers used AI powered tools in Microsoft Defender for Office 365 to piece together clues that were harder for attackers to hide. The system flagged the unusual self-addressed email pattern, the odd SVG file disguised as a PDF, the redirect to a known phishing site, the hidden code inside the file, and the tracking methods used on the phishing page.