mlsanityData to 14 Oct 2026

Jailbreaking Generative AI: Multivector Phishing Threats and Transformer based Defenses

arXiv 2507.12185 ↗First posted 16 Jul 2025cs.CRcited by 0

On the map: LLM safety and security → Prompt injection and agent security

Abstract (arXiv)

The rise of Generative AI (GenAI) has reshaped the cybersecurity landscape by enabling new attack vectors and lowering the barrier for executing advanced social engineering campaigns. This study conducts an empirical analysis of jailbreaking vulnerabilities in ChatGPT-4o-Mini, showing that novices can bypass safeguards to generate complete multivector phishing attacks across email, web, SMS, and voice channels. Controlled experiments reveal that role-based jailbreaks produce fully operational attack paths capable of credential harvesting. User studies further demonstrate the disruptive potential of GenAI: novice participants exhibited a 240% increase in perceived phishing competence, a 400% improvement in task completion rates, and a 57% reduction in implementation time when assisted by GenAI compared to traditional internet resources. To address these risks, a transformer-based detection framework was developed, achieving an F1-score of 0.9864 (XLNET) for identifying malicious prompts. The work underscores the urgency of strengthening LLM guardrails and provides an annotated dataset to support future defenses.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Prompt injection and agent security, one of 12 directions in LLM safety and security. Builds on 13 of its 30 references that are in the map. First posted on arXiv 16 Jul 2025.

Builds on

13 of 30 references.

Closest ancestors · 2

Same direction, newest first

  1. 2025Jailbreaking Generative AI: Empowering Novices to Conduct Phishing Attacks3 Mar
  2. 2023From ChatGPT to ThreatGPT: Impact of Generative AI in Cybersecurity and Privacy3 Jul

Other references · 11

  1. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
  2. 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,372
  3. 2019DistilBERT, a distilled version of BERT: smaller, faster, cheaper and lightercited by 4,307
  4. 2019XLNet: Generalized Autoregressive Pretraining for Language Understandingcited by 2,811
  5. 2023SmoothLLM: Defending Large Language Models Against Jailbreaking Attackscited by 469
  6. 2023Certifying LLM Safety against Adversarial Promptingcited by 266
  7. 2023Defending Large Language Models Against Jailbreaking Attacks Through Goal Prioritizationcited by 170
  8. 2024A Comprehensive Study of Jailbreak Attack versus Defense for Large Language Modelscited by 106
  9. 2024Measure-Observe-Remeasure: An Interactive Paradigm for Differentially-Private Exploratory Analysiscited by 24
  10. 2023Exploring the Dark Side of AI: Advanced Phishing Attack Design and Deployment Using ChatGPTcited by 9
  11. 2024AbuseGPT: Abuse of Generative AI ChatBots to Create Smishing Campaignscited by 9

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2024Review of Generative AI Methods in Cybersecurity
  2. 2025How Generative AI Empowers Attackers and Defenders Across the Trust & Safety Landscape
  3. 2026Large Language Models (LLMs) and Generative AI in Cybersecurity and Privacy: A Survey of Dual-Use Risks, AI-Generated Malware, Explainability, and Defensive Strategies
  4. 2024Generative AI in Cybersecurity: A Comprehensive Review of LLM Applications and Vulnerabilities
  5. 2023Identifying and Mitigating the Security Risks of Generative AI
  6. 2026A Systematic Literature Review on LLM Defenses Against Prompt Injection and Jailbreaking: Expanding NIST Taxonomy
  7. 2025Can AI Models be Jailbroken to Phish Elderly Victims? An End-to-End Evaluation
  8. 2025GenAI Security: Outsmarting the Bots with a Proactive Testing Framework